Þ• á $ , , " - P 0 l . U Ì " < [ " a „ 6 œ Ó ç ô Ü F ù @! ; \"
˜" ¦" | Â" 2 ?# \ r# d Ï# E 4$ Ž z$ B % L% b% u% ”% ®% Â% Ñ% ^ Ú% „ 9& ¾& \ >' : ›' Ö' ` ì' ; M( € ‰( Ò
) Ý)
ç) ú ò) í* ! + ++ D+ Z+ t+ ‹+ •+ ›+ ª+ ¿+ ~ ×+ V, ä, ö, - - 9- Y- e- ( q- ‹ š- &. <. S. x g. y à. ^ Z/ … ¹/ L ?0 r Œ0 G ÿ0 r G1 y º1 Š 42 > ¿2 j þ2 \ i3 w Æ3 y >4 B ¸4 J û4 k F5 J ²5 p ý5 Q n6 0 À6 - ñ6 ¶ 7 f Ö7 N =8 P Œ8 K Ý8 ! )9 ) K9 # u9 ™9 h °9 I : c: {: ˜: & ¶: , Ý:
; $; " 9; \; i; s; …; •; ¥; ½; Ï; Ô; Ù; è; < #< * A< l< †< ¤< Ñ ±< Ð ƒ= & T> - {>
©> # ·> Û> $ ø> # ? $ A? f? + }? ©? ¿? $ à? @ @ .@ D@ ]@ ~@ i ’@ n ü@ , kA 0 ˜A % ÉA ïA B 0 "B [ SB 0 ¯B àB = ÷B 5C KC ‹ `C o ìC \D T qD ÆD ÜD ûD E E 2E GE cE wE ‹E ”E ¦E Š °E < ;F xF …F L ŸF ìF " ýF G % ;G e aG ÇG ÔG ÝG îG Ù ôG ÎH ÑH ÝH * üH 'I ‘ 1I Ž ÃI ˜ RJ Ì ëJ § ¸K `L
lL Ö zL ] QM # ¯M $ ÓM øM
N Q N A eN
§N µN ÌN p ìN ]O |O O
O ®O ÊO àO üO P )P # 9P # ]P P P P žP " ïP Q *Q 7Q
GQ ! UQ wQ
ŠQ ˜Q - ¢Q 7 ÐQ © R ® ²R ¥ aS › T ‚ £T &U +U >U SU gU 2 vU 2 ©U C ÜU j V ‹V / ›V C ËV W É W « ÜW ˆX ™X žX §X ¹X
ÐX ÞX òX Y Y = 9Y * wY 3 ¢Y " ÖY ' ùY . !Z ! PZ j rZ ÝZ
îZ ³ üZ °[ ½[ Ù[ î[ " \ '\ 9\ T\ c\ ' z\ ' ¢\ Ê\ á\ þ\ ]
(] 6] # V] 4 z] ¯] Â] Ê] ß] ë] ^ ^ =^ : ]^ K ˜^ ä^ ~ í^ l_ ‹_ ¬_ Æ_ ä_ û_ ` X ` t` „` ) ` Ù Ç` # ¡a Y Åa † b ž ¦b « Ec | ñc @ nd 5 ¯d e åd K Ke + —e , Ãe ^ ðe 5 Of T …f V Úf ¥ 1g ¡ ×g P yh 3 Êh _ þh Ç ^i / &j 7 Vj - Žj 4 ¼j ‚ ñj d tk Ùk “ il Å ýl v Ãm = :n x xo G ño ‚ 9p } ¼p ™ :q ã Ôq | ¸r I 5s ý s }t ¸ t \ Vu @ ³u § ôu \ œv C ùv Q =w w I ¨w [ òw % Nx tx $ Žx ³x Ãx 4 ßx 8 y My Yy
^y
ly wy ‰y
¡y
¯y ºy Ìy çy ñy ûy # z 5z Bz Nz az pz |z 8 Œz \ Åz % "{ H{ N{ = _{ { Œ ´{ W A| R ™| U ì| ] B} l } ž
~ ¬ ¬~ $ Y = ~ k ¼ | (€ M ¥€ Q ó€ L E X ’ ? ë B +‚ n‚ Õ ÿ‚ 3 Õƒ ¢ „ f ¬„ ¢ … / ¶… æ… þ… $ † S >† c ’† M ö† 7 D‡ |‡ Œ‡ ’‡ ›‡ ¢‡ ª‡ ¯‡ ´‡ h ½‡ &ˆ j >ˆ Y ©ˆ ‰ ‰ ‰ ‰ ‰ B %‰ h‰ l‰
t‰ ‚‰ †‰ ‰ •‰ œ‰ £‰ m §‰ Š Z 3Š , ŽŠ Œ »Š + H ' t F œ @ ã V $Ž {Ž “Ž ®Ž ´Ž # ÔŽ G øŽ ; @ ê | g l ƒ K ð V <’
“’ # ž’ „ Â’ ; G“ k ƒ“ ` ï“ _ P” ¤ °” R U• ¨• ½• Õ• í• – – 4– W ;– ˜ “– ’ ,— j ¿— D *˜ o˜ | ‹˜ B ™ ƒ K™ ß Ï™ ¯š ·š Áš à› ' ø› œ 8œ Pœ lœ ƒœ ”œ ›œ ¬œ Äœ ¢ Üœ Ž ž (ž Bž 2 Yž 2 Œž ¿ž מ ( ïž d Ÿ ! }Ÿ # ŸŸ ß ØŸ ¥ f k ¡ Ÿ x¡ j ¢ Ž ƒ¢ ] £ • p£ ° ¤ » ·¤ f s¥ ‰ Ú¥ s d¦ } ئ ˜ V§ ` ï§ q P¨ ¨ l D© ±© r Bª ? µª 7 õª ¶ -« x ä« ] ]¬ a »¬ a 8 / ¸ % è * ® o 9® N ©® ø®
¯ )¯ G¯ ) f¯ ¯ ! ®¯ / Я ° ° "° <° F° S° g° ° ˆ° Œ° + ° $ É° ! î° ) ± :± U±
t± , ‚± Ä ¯² 0 t³ G ¥³ í³ 2 þ³ ( 1´ 5 Z´ ´ 7 ¯´ ç´ , µ 4µ ! Lµ ( nµ —µ ' ¨µ е ( ëµ ( ¶ =¶ o O¶ o ¿¶ ? /· @ o· E °· ö· $ ¸ P :¸ } ‹¸ = ¹ G¹ R Z¹ ¹ ù ع b Xº »º b Ùº <» Q»
m» {» » ¥» ½» Û» ó» ¼ ¼ &¼ © 0¼ < Ú¼ ½ $ +½ R P½
£½ ! ±½ Ó½ 1 ô½ ‰ &¾ °¾ ¿¾ Ó¾ î¾ ï õ¾ å¿
è¿ 7 ó¿ > +À
jÀ è uÀ Ž ^Á ¤ íÁ ß ’Â Í rà @Ä TÄ nÄ ‰ rÅ . üÅ + +Æ WÆ
^Æ T lÆ I ÁÆ Ç $ !Ç " FÇ ’ iÇ üÇ È %È <È ! MÈ oÈ È ®È " ÆÈ éÈ $ É 2 &É YÉ fÉ [ zÉ 5 ÖÉ Ê (Ê
=Ê
KÊ " YÊ |Ê ”Ê ¡Ê Q «Ê S ýÊ · QË ä Ì å îÌ · ÔÍ Ž ŒÎ Ï ! "Ï ! DÏ ! fÏ ˆÏ = ¢Ï 7 àÏ I Ð € bÐ ãÐ % ÷Ð > Ñ \Ñ å cÑ Ç IÒ Ó #Ó -Ó :Ó TÓ
iÓ wÓ Ó ¤Ó # ¹Ó K ÝÓ 0 )Ô ; ZÔ - –Ô & ÄÔ B ëÔ ' .Õ x VÕ ÏÕ
àÕ Á îÕ °Ö 1 ÈÖ
úÖ
× × ! 5× ( W× €× •× ' × ' Õ× ý× Ø 4Ø LØ
aØ oØ " ŽØ E ±Ø ÷Ø Ù Ù
.Ù <Ù QÙ * fÙ . ‘Ù B ÀÙ Z Ú ^Ú ’ eÚ 7 øÚ 0Û PÛ ! hÛ $ ŠÛ
¯Û
½Û p ËÛ <Ü ! MÜ & oÜ ß –Ü + vÝ u ¢Ý Þ ³ ¶Þ á jß Ž Là a Ûà 4 =á u rá R èá 4 ;â 4 pâ y ¥â J ã U jã \ Àã Ò ä È ðä d ¹å D æ ‚ cæ ææ / õç I %è 5 oè = ¥è ¹ ãè Œ é ¥ *ê ° Ðê ì ë nì c þì ® bî I ï ¯ [ï ’ ð £ žð
Bñ † Mò M Ôò ù "ó ( ô æ Eô h ,õ n •õ Å ö g Êö S 2÷ ] †÷ - ä÷ Z ø k mø 8 Ùø ù 2 2ù eù ~ù B šù 2 Ýù ú ú )ú :ú Nú ! [ú }ú Žú ¢ú ¯ú Çú Ôú æú 5 û ;û Lû Vû mû û •û A ¦û ² èû B ›ü Þü ! âü @ ý ! Eý ¸ gý _ þ @ €þ j Áþ r ,ÿ Ž Ÿÿ ¼ . × ë 2 à U ö u L ›  V ^ Z µ E c V P º Z Ÿ f õ : ü Ê 7 { ¨ ~ L ' t 6 … , ¼ \ é d F
W «
> B L N Q T W Y [ e ^ & Ä ™ ë o … õ ÷ ú ü þ K
M
O
R
f
i
l
n
q
t
j v
á
y ý
D w is not a valid ip address format. %s table name update failed %s tables had their prefix updated successfully! %s view definitions were updated successfully! (Minutes) The user will be forced to log back in after this time period has elapased. .htaccess file operations .htaccess file to restore from 1 sec 1) Denial of Service (DoS) attacks 1) Enable the checkbox. 1) Protect your htaccess file by denying access to it. 2) Disable the server signature. 2) Enter a secret word consisting of alphanumeric characters which will be difficult to guess. This secret word will be useful whenever you need to know the special URL which you will use to access the login page (see point below). 2) Hacking internal routers. 3) Scanning ports in internal networks to get info from various hosts. 3) You will then be provided with a special login URL. You will need to use this URL to login to your WordPress site instead of the usual login URL. NOTE: The system will deposit a special cookie in your browser which will allow you access to the WordPress administration login page. 4) Protect your wp-config.php file by denying access to it. 404 detection 6G Blacklist firewall rules ERROR: Access from your IP address has been blocked for security reasons. Please contact the administrator. ERROR: Invalid login credentials. ERROR: The table prefix can only contain numbers, letters, and underscores. ERROR: You are not allowed to register because your IP address is currently locked! ERROR: Your answer was incorrect - please try again. A Brute Force Attack is when a hacker tries many combinations of usernames and passwords until they succeed in guessing the right combination. A backup copy of your wp-config.php file was created successfully! Account activity logs Account login name Additional firewall protection Additional firewall rules Admin user security Admin username Advanced After clicking the above link you will be able to login to the WordPress administration panel. After selecting your file click the button below to restore your site using the backed up wp-config file (wp-config.php.backup.txt). After selecting your file, click the button below to restore your site using the backed up htaccess file (htaccess_backup.txt). All In One WP Security & Firewall has detected that there was a change in your host's files. All the security features have been disabled successfully! Allow unlock requests An effective Brute Force prevention technique is to change the default WordPress login page URL. An email has been sent to you with the unlock instructions. Any person trying to access your login page who does not have the special cookie in their browser will be automatically blocked. Apart from the security protection benefit, this feature may also help reduce load on your server, particularly if your site currently has a lot of unwanted traffic hitting the XML-RPC API on your installation. Attention Attention: Attention: If in addition to enabling the white list feature, you also have one of the %s or %s features enabled, you will still need to use your secret word or special slug in the URL when trying to access your WordPress login page. Automated scheduled backups Automatic daily scan of 1 website Automatic email alerting Backup .htaccess file Backup wp-config.php file Ban IPs or user agents Ban users Basic Basic firewall Basic firewall rules Basic firewall settings Being informed of any changes in your files can be a good way to quickly prevent a hacker from causing damage to your website. Below is the current status of the critical features that you should activate on your site to achieve a minimum level of recommended security Blacklist Manager Blacklist manager Blacklist removal Block access to debug.log file Block accesss to debug log file Brute Force Brute force Brute force prevention firewall settings By doing this, malicious bots and hackers will not be able to access your login page because they will not know the correct login page URL. Change admin username Change database prefix Change display name Check this if you are not using the WP XML-RPC functionality and you want to completely block external access to XMLRPC. Check this if you are using the native WordPress password protection feature for some or all of your blog posts or pages. Check this if you want the plugin to generate a random 6 character string for the table prefix Check this if you want the system to automatically/periodically scan your files to check for file changes based on the settings below Check this if you want the system to email you if a file change was detected Check this if you want to allow users to generate an automated unlock request link which will unlock their account Check this if you want to apply basic firewall protection to your site. Check this if you want to block access to the debug.log file that WordPress creates when debug logging is enabled. Check this if you want to enable debug. You should keep this option disabled after you have finished debugging the issue. Check this if you want to enable the banning (or blacklisting) of selected IP addresses and/or user agents specified in the settings below Check this if you want to enable the rename login page feature Check this if you want to enable the whitelisting of selected IP addresses specified in the settings below Check this if you want to force a wp user to be logged out after a configured amount of time Check this if you want to insert CAPTCHA on a custom login form generated by the following WP function: wp_login_form() Check this if you want to insert a CAPTCHA form on the WordPress user registration page (if you allow user registration). Check this if you want to insert a CAPTCHA form on the login page. Check this if you want to insert a CAPTCHA form on the lost password page. Check this if you want to instantly lockout login attempts with usernames which do not exist on your system Check this if you want to protect your login page from Brute Force Attack. Check this if you want to receive an email when someone has been locked out due to maximum failed login attempts Check this if you want to show a generic error message when a login attempt fails Check this if your site uses AJAX functionality. Checking for MySQL tables of type "view"..... Choose a secret word consisting of alphanumeric characters which you can use to access your special URL. Your are highly encouraged to choose a word which will be difficult to guess. Click the button below to backup and download the contents of the currently active wp-config.php file. Click the button below to backup and save the currently active .htaccess file. Click the button below to view the saved file change results from the last scan. Click this button if you wish to delete all failed login records in one go. Completely block access to XMLRPC Cookie based brute force login prevention Cookie based brute force prevention Copy/Paste import data Could not delete the Cookie-based directives from the .htaccess file. Please check the file permissions. Could not write to the .htaccess file. Please check the file permissions. Critical feature status Current Score of Your Site: Current database table prefix Currently locked out IP address ranges Currently locked out IP addresses and ranges Currently logged in users Custom login CAPTCHA Custom login form CAPTCHA settings Custom rules Dashboard Database Security Database backup Database prefix Database prefix options Database security Date Days Debug settings Delete all failed login records Disable all firewall rules Disable all security features Disable pingback functionality from XMLRPC Disable security features Display generic error message Display name Due to the constantly changing and complex nature of Malware, scanning for such things using a standalone plugin will not work reliably. This is something best done via an external scan of your site regularly. Due to the fact that at any one time there may be many concurrent login attempts occurring on your site via malicious automated robots, this also has a negative impact on your server's memory and performance. Each IP address must be on a new line. Each user agent string must be on a new line. Email Address Enable CAPTCHA on custom login form Enable CAPTCHA on login page Enable CAPTCHA on lost password page Enable CAPTCHA on registration page Enable IP or user agent blacklisting Enable IP whitelisting Enable automated file change detection scan Enable basic firewall Enable basic firewall protection Enable brute force attack prevention Enable debug Enable force WP user logout Enable login honeypot Enable rename login page Enable rename login page feature Enter IP addresses: Enter each file or directory on a new line which you wish to exclude from the file change detection scan. Enter each file type or extension on a new line which you wish to exclude from the file change detection scan. Enter one or more IP addresses or IP ranges. Enter one or more email addresses on a new line. Enter one or more user agent strings. Enter user agents: Enter whitelisted IP addresses: Error - Could not get tables or no tables found! Error updating user_meta table where new meta_key = %s, old meta_key = %s and user_id = %s. Example 1 - A single user agent string to block: Example 1: 195.47.89.* Example 2 - A list of more than 1 user agent strings to block Example 2: 195.47.*.* Example 3: 195.*.*.* Example: If you want the scanner to ignore certain files in different directories or whole directories, then you would enter the following: Example: If you want the scanner to ignore files of type jpg, png, and bmp, then you would enter the following: Failed login records Failed to make a backup of the wp-config.php file. This operation will not go ahead. File change detection File change detection settings File permission File permissions File permissions scan File types to ignore Files/Directories to ignore Filesystem Security Filesystem security Firewall Firewall settings Follow us For Example: If a settings item relies on the domain URL then it may not work correctly when imported into a site with a different domain. For information, updates and documentation, please visit the Force logout Force user logout options From now on you will need to log into your WP Admin using the following URL: General settings Generate new database table prefix Get to know the developers Go to the %s menu to see more details Hackers can exploit various vulnerabilities in the WordPress XML-RPC API in a number of ways such as: Helpful Tip: Honeypot Host system logs Hours However, sometimes people or other plugins modify the various permission settings of certain core WP folders or files such that they end up making their site less secure because they chose the wrong permission values. IP IP address: IP and user agent blacklisting IP hosts and user agent blacklist settings IP range: If given an opportunity hackers can insert their code or files into your system which they can then use to carry out malicious acts on your site. If the maximum number of failed login attempts for a particular IP address occur within this time period the plugin will lock out that address If you do not use the WordPress password protection feature for your posts or pages then it is highly recommended that you leave this checkbox disabled. If you think that some plugin functionality on your site is broken due to a security feature you enabled in this plugin, then use the following option to turn off all the security features of this plugin. If you use Jetpack or WP iOS or other apps which need WP XML-RPC functionality then check this. This will enable protection against WordPress pingback vulnerabilities. Import file Import/Export In general, WordPress core and plugin files and file types such as ".php" or ".js" should not change often and when they do, it is important that you are made aware when a change occurs and which file was affected. Insert one username per line. Existing usernames are not blocked even if present in the list. Instantly lockout invalid usernames Instantly lockout specific usernames Intermediate Internet bots It is important that you save this URL value somewhere in case you forget it, OR, It is recommended that you perform a %s before using this feature Last 5 logins Last 5 logins summary: Latest file change scan results Leave this feature disabled and use the feature below if you want pingback protection but you still need XMLRPC. List of administrator accounts Locked IP addresses Logged in users Login CAPTCHA Login IP whitelist settings Login IP whitelisting Login form CAPTCHA settings Login page URL Login retry time period (min) Login whitelist Logout the WP user after XX minutes Lost password form CAPTCHA settings Maintenance Maintenance mode Maintenance mode is currently enabled. Remember to turn it off when you are done Maintenance mode is currently off. Maintenance mode status Malware scan Manual approval Manual backup Manual file change detection scan Max login attempts Miscellaneous More info My site has a theme or plugins which use AJAX My site has posts or pages which are password protected NOTE: Before importing, it is your responsibility to know what settings you are trying to import. Importing settings blindly can cause you to be locked out of your site. NOTE: If you are hosting your site on WPEngine or a provider which performs server caching, you will need to ask the host support people to NOT cache your renamed login page. NOTE: If you use Jetpack or the Wordpress iOS or other apps then you should enable this feature but leave the "Completely Block Access To XMLRPC" checkbox unchecked. NOTE: This feature does NOT use the .htaccess file to permanently block the IP addresses so it should be compatible with all web servers running WordPress. NOTE: You should only enable this feature if you are not currently using the XML-RPC functionality on your WordPress installation. Name No action required No action required! No action required. No data found. Nonce check failed for DB prefix change operation! Nonce check failed for manual DB backup operation! Nonce check failed for manual file change detection scan operation! Normally if you wanted to login to WordPress you would type your site's home URL followed by wp-login.php. Notify by email Number of temporarily locked out IP addresses: Number of users currently logged into your site (including you) is: OR Often when malware code has been inserted into your site you will normally not notice anything out of the ordinary based on appearances, but it can have a dramatic effect on your site's search ranking. One way to add a layer of protection for your DB is to change the default WordPress table prefix from "wp_" to something else which will be difficult for hackers to guess. PHP file editing Page Password Password Strength Password strength tool Password tool Perform cookie test Perform scan now Permanent block list Permanently blocked IP addresses Please change the prefix manually for the above tables to: %s Please choose a .htaccess to restore from. Please choose a wp-config.php file to restore from. Please enter a valid email address Please enter a value for the DB prefix. Please enter a value for your login page slug. Please enter an answer in digits: Please enter your email address and you will receive an email with instructions on how to unlock yourself. Prevent hotlinks Re-direct URL Redirecting a hacker or malicious bot back to "http://127.0.0.1" is ideal because it deflects them back to their own local host and puts the load on their server instead of yours. Refresh data Refresh logged in user data Registration CAPTCHA Registration approval Registration page CAPTCHA settings Rename login page Rename login page settings Request unlock Restore .htaccess file Restore from a backed up .htaccess file Restore from a backed up wp-config file Restore wp-config file Save basic firewall settings Save debug settings Save feature settings Save settings Save the current .htaccess file Save the current wp-config.php file Scan complete - There were no file changes detected! Scan time interval Scanner Scanning for malware Secret word Security points breakdown Security strength meter Send email when change detected Service temporarily unavailable Set the value for how often you would like a scan to occur Set the value for the maximum login retries before IP address is locked out Settings Settings have not been saved - your secret word must consist only of alphanumeric characters, ie, letters and/or numbers only. Settings successfully updated. Settings were successfully saved Site Lockout Notification Site response time monitoring Site uptime monitoring Spam Prevention Spam prevention Specify a URL to redirect a hacker to when they try to access your WordPress login page. Spread the word Start typing a password. Starting DB prefix change operations..... The "File Change Detection Feature" will notify you of any file change which occurs on your system, including the addition and deletion of files by performing a regular automated or manual scan of your system's files. The %s feature is currently active. The %s table records which had references to the old DB prefix were updated successfully! The All In One WP Security Blacklist feature gives you the option of banning certain host IP addresses or ranges and also user agents. The All In One WP Security Whitelist feature gives you the option of only allowing certain IP addresses or ranges to have access to your WordPress login page. The URL specified here can be any site's URL and does not have to be your own. For example you can be as creative as you like and send hackers to the CIA or NSA home page. The above firewall features will be applied via your .htaccess file and should not affect your site's overall functionality. The cookie test was successful. You can now enable this feature. The database prefix change tasks have been completed. The feature will still allow XMLRPC functionality on your site but will disable the pingback methods. The following address was removed because it is not a valid email address: The following files were added to your host The following files were added to your host. The options table records which had references to the old DB prefix were updated successfully! The permissions for %s were succesfully changed to %s The plugin achieves this by making appropriate modifications to your .htaccess file. The plugin achieves this by writing the appropriate directives to your .htaccess file. The plugin has detected that it cannot write to the wp-config.php file. This feature can only be used if the plugin can successfully write to the wp-config.php file. The plugin has detected that this is your first file change detection scan. The file details from this scan will be used to detect file changes for future scans. The plugin was unable to write to the .htaccess file. Please edit file manually. The selected IP entries were unlocked successfully. The usermeta table records which had references to the old DB prefix were updated successfully! The word malware stands for Malicious Software. It can consist of things like trojan horses, adware, worms, spyware and any other undesirable code which a hacker will try to inject into your website. There are no IP addresses currently locked out. There are no other site-wide users currently logged in. There are no other users currently logged in. There have been no file changes since the last scan. These features are NOT functionally related. Having both of them enabled on your site means you are creating 2 layers of security. This can be handy if you wanted to save time by applying the settings from one site to another site. This feature allows you to backup and save your currently active .htaccess file should you need to re-use the the backed up file in the future. This feature allows you to backup and save your currently active wp-config.php file should you need to re-use the the backed up file in the future. This feature allows you to change the login URL by setting your own slug and renaming the last portion of the login URL which contains the wp-login.php to any string that you like. This feature allows you to easily change the prefix to a value of your choice or to a random value set by this plugin. This feature also allows you to exclude certain files or folders from the scan in cases where you know that they change often as part of their normal operation. (For example log files and certain caching plugin files may change often and hence you may choose to exclude such files from the file change detection scan) This feature can lock you out of admin if it doesn't work correctly on your site. You %s before activating this feature. This feature will also remove the "X-Pingback" header if it is present. This feature will deny access to your WordPress login page for all people except those who have a special cookie in their browser. This feature will deny login access for all IP addresses which are not in your whitelist as configured in the settings below. This feature will deny total site access for users which have IP addresses or user agents matching those which you have configured in the settings below. This feature will disable all firewall rules which are currently active in this plugin and it will also delete these rules from your .htacess file. Use it if you think one of the firewall rules is causing an issue on your site. This feature will scan the critical WP core folders and files and will highlight any permission settings which are insecure. This field will default to: http://127.0.0.1 if you do not enter a value. This is because the bots and spiders from search engines such as Google have the capability to detect malware when they are indexing the pages on your site, and consequently they can blacklist your website which will in turn affect your search rankings. This is good security practice. This is why we have created an easy-to-use scanning service which is hosted off our own server which will scan your site for malware once every day and notify you if it finds anything. This section allows you to export or import your All In One WP Security & Firewall settings. This setting allows you to enable/disable debug for this plugin. This setting will add a directive in your .htaccess to disable access to the WordPress xmlrpc.php file which is responsible for the XML-RPC functionality in WordPress. This setting will implement the following basic firewall protection mechanisms on your site: This tab displays the list of all permanently blocked IP addresses. To export your All In One WP Security & Firewall settings click the button below. To learn more please %s. To perform a manual file change detection scan click on the button below. To see a list of all locked IP addresses and ranges go to the %s tab in the dashboard menu. To use this feature do the following: Total Achievable Points: Unable to change permissions for %s! Unlock link: %s Unlock request notification Update of table %s failed: unable to change %s to %s Update of the following MySQL view definition failed: %s Useful Tip: User User Accounts User Login User Registration User account not found! User accounts User login User registration User registration settings Username Username: View last file change View last saved file change results WHOIS lookup WP Security WP Security plugin WP file access WP username WP version info Wanna know more about the developers behind this plugin? We are working hard to make your WordPress site more secure. Please support us, here is how: We provide advice for malware cleanup Weeks What is malware? When you sign up for this service you will get the following: WordPress files access WordPress has an option to turn on the debug logging to a file located in wp-content/debug.log. This file may contain sensitive information. You are here because you have been locked out due to too many incorrect login attempts. You are still advised to take a backup of your active .htaccess file just in case. You can also restore your site's .htaccess settings using a backed up .htaccess file. You can also restore your site's wp-config.php settings using a backed up wp-config.php file. You can copy and paste this address in the text box below if you want to include it in your login whitelist. You can exclude file types from the scan which would not normally pose any security threat if they were changed. These can include things such as image files. You can exclude specific files/directories from the scan which would not normally pose any security threat if they were changed. These can include things such as log files. You cannot ban your own IP address: You cannot use the value "wp-admin" for your login page slug. You entered a non numeric value for the "backup time interval" field. It has been set to the default value. You have requested for the account with email address %s to be unlocked. Please click the link below to unlock your account: You have successfully enabled the cookie based brute force prevention feature You have successfully saved cookie based brute force prevention feature settings. You have successfully saved the Additional Firewall Protection configuration You may also be interested in the following alternative brute force prevention features: You must use alpha numeric characters for your login page slug. You were logged out because you just changed the "admin" username. Your ".htaccess" file is a key component of your website's security and it can be modified to implement various levels of protection mechanisms. Your "wp-config.php" file is one of the most important in your WordPress installation. It is a primary configuration file and contains crucial things such as details of your database and other critical components. Your .htaccess file has successfully been restored! Your .htaccess file was successfully backed up! Using an FTP program go to the "/wp-content/aiowps_backups" directory to save a copy of the file to your computer. Your WP installation already comes with reasonably secure file permission settings for the filesystem. Your WordPress file and folder permission settings govern the accessability and read/write privileges of the files and folders which make up your WP installation. Your WordPress login page URL has been renamed. Your current IP address Your current login URL is: Your new WordPress login URL is now: Your session has expired because it has been over %d minutes since your last login. Your site currently has the following accounts which have an identical login name and display name. Your site does not have any account which uses the default "admin" username. Your wp-config.php file has successfully been restored! database backup eight eighteen eleven fifteen five four fourteen htaccess Restore operation failed! Please check the contents of the file you are trying to restore from. htaccess backup failed. htaccess file rename failed during backup. Please check your root directory for the backup file using FTP. htaccess file restore failed. Please attempt to restore the .htaccess manually using FTP. nine nineteen one seven seventeen simply remember to add a "?%s=1" to your current site URL address. six sixteen somedirectory ten thirteen three twelve twenty two wp-config.php Restore operation failed! Please check the contents of the file you are trying to restore from. wp-config.php file operations wp-config.php file restore failed. Please attempt to restore this file manually using FTP. wp-config.php file was updated successfully! Project-Id-Version: All In One WP Security 4.4.4
Report-Msgid-Bugs-To:
POT-Creation-Date: 2017-04-18 18:26+0800
PO-Revision-Date: 2020-08-08 15:15+0900
Last-Translator: Luatic
Language-Team: Luatic
Language: ko_KR
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=2; plural=1;
X-Generator: Poedit 1.8.13
X-Poedit-Basepath: ..
X-Poedit-KeywordsList: __;_e;__ngettext:1,2;_n:1,2;__ngettext_noop:1,2;_n_noop:1,2;_c,_nc:4c,1,2;_x:1,2c;_ex:1,2c;_nx:4c,1,2;_nx_noop:4c,1,2
X-Poedit-SearchPath-0: .
X-Poedit-SourceCharset: UTF-8
X-Textdomain-Support: yes
ìœ íš¨í•œ IP 주소 형ì‹ì´ 아닙니다. %s í…Œì´ë¸” ì´ë¦„ ì—…ë°ì´íŠ¸ 실패 %s í…Œì´ë¸”ì€ ì ‘ë‘사를 성공ì 으로 ì—…ë°ì´íŠ¸í–ˆìŠµë‹ˆë‹¤! %s 보기 ì •ì˜ê°€ 성공ì 으로 ì—…ë°ì´íŠ¸ë˜ì—ˆìŠµë‹ˆë‹¤! (분) ì´ ê¸°ê°„ì´ ì¤‘ë³µëœ í›„ì—는 사용ìžê°€ 다시 로그ì¸í•´ì•¼ 합니다. .htaccess íŒŒì¼ ìž‘ì—… ë³µì›í• .htaccess íŒŒì¼ 1 ì´ˆ 1) 서비스 거부(DoS) 공격 1) 확ì¸ëž€ì„ 활성화합니다. 1) 액세스 ê¶Œí•œì„ ê±°ë¶€í•˜ì—¬ htaccess 파ì¼ì„ 보호합니다. 2) 서버 ì„œëª…ì„ ì‚¬ìš©í•˜ì§€ ì•Šë„ë¡ ì„¤ì •í•©ë‹ˆë‹¤. 2) 추측하기 ì–´ë ¤ìš´ 거넘 문ìžë¡œ êµ¬ì„±ëœ ë¹„ë°€ 단어를 ìž…ë ¥í•©ë‹ˆë‹¤. ì´ ë¹„ë°€ 단어는 ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— 액세스하는 ë° ì‚¬ìš©í• íŠ¹ìˆ˜ URLì„ ì•Œì•„ì•¼ í• ë•Œë§ˆë‹¤ ìœ ìš©í•©ë‹ˆë‹¤(아래 ì 참조). 2) 해킹 내부 ë¼ìš°í„°. 3) 다양한 호스트로부터 ì •ë³´ë¥¼ 얻기 위해 내부 네트워í¬ì—ì„œ í¬íŠ¸ë¥¼ 스캔합니다. 3) ë‹¹ì‹ ì€ ë‹¤ìŒ íŠ¹ë³„í•œ ë¡œê·¸ì¸ URLì´ ì œê³µë©ë‹ˆë‹¤. ì´ URLì„ ì‚¬ìš©í•˜ì—¬ ì¼ë°˜ì ì¸ ë¡œê·¸ì¸ URL ëŒ€ì‹ WordPress 사ì´íŠ¸ì— 로그ì¸í•´ì•¼ 합니다. ì°¸ê³ : ì‹œìŠ¤í…œì€ ë‹¹ì‹ ì´ ì›Œë“œ í”„ë ˆìŠ¤ 관리 ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— 액세스 í• ìˆ˜ 있ë„ë¡ ë¸Œë¼ìš°ì €ì— 특별한 ì¿ í‚¤ë¥¼ 입금합니다. 4) ê·¸ê²ƒì— ëŒ€í•œ 액세스를 거부하여 wp-config.php 파ì¼ì„ 보호합니다. 404 ê°ì§€ 6G 블랙리스트 방화벽 규칙 오류: 보안ìƒì˜ ì´ìœ ë¡œ IP ì£¼ì†Œì˜ ì•¡ì„¸ìŠ¤ê°€ 차단ë˜ì—ˆìŠµë‹ˆë‹¤. 관리ìžì—게 문ì˜í•˜ì‹ì‹œì˜¤. 오류: ìž˜ëª»ëœ ë¡œê·¸ì¸ ìžê²© ì¦ëª…. 오류: í…Œì´ë¸” ì ‘ë‘사ì—는 숫ìž, ë¬¸ìž ë° ë°‘ì¤„ë§Œ í¬í•¨ë 수 있습니다. 오류: IP 주소가 현재 ìž ê²¨ 있기 ë•Œë¬¸ì— ë“±ë¡í• 수 없습니다! 오류: ë‹¹ì‹ ì˜ ëŒ€ë‹µì€ ìž˜ëª»ë˜ì—ˆìŠµë‹ˆë‹¤ - 다시 ì‹œë„하ì‹ì‹œì˜¤. 무차별 í¬ìŠ¤ ê³µê²©ì€ í•´ì»¤ê°€ 올바른 ì¡°í•©ì„ ì¶”ì¸¡í•˜ëŠ” ë° ì„±ê³µí• ë•Œê¹Œì§€ ì‚¬ìš©ìž ì´ë¦„ê³¼ ì•”í˜¸ì˜ ë§Žì€ ì¡°í•©ì„ ì‹œë„í• ë•Œìž…ë‹ˆë‹¤. wp-config.php 파ì¼ì˜ 백업 ë³µì‚¬ë³¸ì´ ì„±ê³µì 으로 만들어졌습니다! ê³„ì • í™œë™ ë¡œê·¸ ê³„ì • ë¡œê·¸ì¸ ì´ë¦„ 추가 방화벽 보호 추가 방화벽 규칙 ê´€ë¦¬ìž ì‚¬ìš©ìž ë³´ì•ˆ ê´€ë¦¬ìž ì•„ì´ë”” ê³ ê¸‰ ìœ„ì˜ ë§í¬ë¥¼ í´ë¦í•˜ë©´ WordPress 관리 패ë„ì— ë¡œê·¸ì¸í• 수 있습니다. 파ì¼ì„ ì„ íƒí•œ 후 아래 ë²„íŠ¼ì„ í´ë¦í•˜ì—¬ ë°±ì—…ëœ wp-config 파ì¼(wp-config.php.backup.txt)ì„ ì‚¬ìš©í•˜ì—¬ 사ì´íŠ¸ë¥¼ ë³µì›í•©ë‹ˆë‹¤. 파ì¼ì„ ì„ íƒí•œ 후 아래 ë²„íŠ¼ì„ í´ë¦í•˜ì—¬ ë°±ì—…ëœ htaccess 파ì¼(htaccess_backup.txt)ì„ ì‚¬ìš©í•˜ì—¬ 사ì´íŠ¸ë¥¼ ë³µì›í•©ë‹ˆë‹¤. ëª¨ë“ í•˜ë‚˜ì˜ WP 보안 ë° ë°©í™”ë²½ì€ í˜¸ìŠ¤íŠ¸ì˜ íŒŒì¼ì— ë³€ê²½ì´ ìžˆìŒì„ ê°ì§€í–ˆìŠµë‹ˆë‹¤. ëª¨ë“ ë³´ì•ˆ ê¸°ëŠ¥ì´ ì„±ê³µì 으로 비활성화ë˜ì—ˆìŠµë‹ˆë‹¤! ìž ê¸ˆ í•´ì œ ìš”ì² í—ˆìš© 효과ì ì¸ ë¬´ì°¨ë³„ í¬ìŠ¤ 방지 ê¸°ìˆ ì€ ê¸°ë³¸ 워드 í”„ë ˆìŠ¤ ë¡œê·¸ì¸ íŽ˜ì´ì§€ URLì„ ë³€ê²½í•˜ëŠ” 것입니다. ìž ê¸ˆ í•´ì œ 지침과 함께 ì´ë©”ì¼ì´ ì „ì†¡ë˜ì—ˆìŠµë‹ˆë‹¤. 브ë¼ìš°ì €ì— 특별한 ì¿ í‚¤ê°€ 없는 ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— ì•¡ì„¸ìŠ¤í•˜ë ¤ëŠ” ëª¨ë“ ì‚¬ëžŒì´ ìžë™ìœ¼ë¡œ 차단ë©ë‹ˆë‹¤. 보안 보호 ì´ì 외ì—ë„ ì´ ê¸°ëŠ¥ì€ íŠ¹ížˆ 사ì´íŠ¸ì— 현재 설치시 XML-RPC APIì— ì˜í–¥ì„ 미치는 ì›ì¹˜ 않는 íŠ¸ëž˜í”½ì´ ë§Žì€ ê²½ìš° ì„œë²„ì˜ ë¶€í•˜ë¥¼ 줄ì´ëŠ” ë° ë„ì›€ì´ ë 수 있습니다. 주ì˜! 注æ„： 주ì˜: í™”ì´íŠ¸ 리스트 ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë„ë¡ ì„¤ì •í•˜ëŠ” 것 외ì—ë„ %s ë˜ëŠ” %s 기능 중 하나가 í™œì„±í™”ëœ ê²½ìš° WordPress ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— ì•¡ì„¸ìŠ¤í•˜ë ¤ê³ í• ë•Œ URLì—ì„œ 비밀 단어 ë˜ëŠ” 특수 슬러그를 사용해야 합니다. ìžë™ ì˜ˆì•½ëœ ë°±ì—… 1 웹 사ì´íŠ¸ì˜ ìžë™ ì¼ì¼ 검사 ìžë™ ì´ë©”ì¼ ê²½ê³ ë°±ì—… .htaccess íŒŒì¼ ë°±ì—… wp-config.php íŒŒì¼ Ban IPs or User Agents ì‚¬ìš©ìž ì°¨ë‹¨ 기본 기본 방화벽 기본 방화벽 규칙 기본 방화벽 ì„¤ì • 파ì¼ì˜ 변경 사í•ì„ 알리는 ê²ƒì€ í•´ì»¤ê°€ 웹 사ì´íŠ¸ì— ì†ìƒì„ 입히는 ê²ƒì„ ì‹ ì†í•˜ê²Œ 방지하는 ì¢‹ì€ ë°©ë²•ì´ ë 수 있습니다. 다ìŒì€ ìµœì†Œí•œì˜ ê¶Œìž¥ ë³´ì•ˆì„ ë‹¬ì„±í•˜ê¸° 위해 사ì´íŠ¸ì—ì„œ 활성화해야 하는 중요한 ê¸°ëŠ¥ì˜ í˜„ìž¬ ìƒíƒœìž…니다. 블랙리스트 ê´€ë¦¬ìž ë¸”ëž™ë¦¬ìŠ¤íŠ¸ ê´€ë¦¬ìž ë¸”ëž™ë¦¬ìŠ¤íŠ¸ ì œê±° 디버그.로그 파ì¼ì— 대한 액세스 차단 디버그 로그 파ì¼ì— 대한 액세스 차단 무차별 대입 공격 무차별 대입 공격 무차별 ê°•ì œ 방지 방화벽 ì„¤ì • ì´ë ‡ê²Œ 하면 ì•…ì˜ì ì¸ ë´‡ê³¼ 해커가 ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— ì•¡ì„¸ìŠ¤í• ìˆ˜ 없습니다. ê´€ë¦¬ìž ì‚¬ìš©ìž ì´ë¦„ 변경 ë°ì´í„°ë² ì´ìŠ¤ ì ‘ë‘사 변경 표시 ì´ë¦„ 변경 WP XML-RPC ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ì§€ ì•Šê³ XMLRPCì— ëŒ€í•œ 외부 액세스를 ì™„ì „ížˆ ì°¨ë‹¨í•˜ë ¤ëŠ” 경우 ì´ ê¸°ëŠ¥ì„ í™•ì¸í•©ë‹ˆë‹¤. 블로그 게시물 ë˜ëŠ” 페ì´ì§€ì˜ ì¼ë¶€ ë˜ëŠ” ì „ë¶€ì— ëŒ€í•´ 기본 WordPress 암호 보호 ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ëŠ” 경우 ì´ ê¸°ëŠ¥ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. 플러그ì¸ì´ í…Œì´ë¸” ì ‘ë‘ì‚¬ì— ëŒ€í•œ ìž„ì˜ì˜ 6 ìž ë¬¸ìžì—´ì„ ìƒì„±í•˜ë ¤ëŠ” ê²½ìš°ì´ í™•ì¸ ì‹œìŠ¤í…œì´ íŒŒì¼ì„ ìžë™ìœ¼ë¡œ/주기ì 으로 스캔하여 아래 ì„¤ì •ì— ë”°ë¼ íŒŒì¼ ë³€ê²½ 사í•ì„ 확ì¸í•˜ë ¤ë©´ ì´ ë°©ë²•ì„ í™•ì¸í•©ë‹ˆë‹¤. íŒŒì¼ ë³€ê²½ì´ ê°ì§€ëœ 경우 시스템ì—ì„œ ì´ë©”ì¼ì„ ë³´ë‚´ë ¤ë©´ ì´ ë°©ë²•ì„ í™•ì¸í•©ë‹ˆë‹¤. 사용ìžê°€ ê³„ì •ìž ê¸ˆì„ í•´ì œí•˜ëŠ” ìžë™ ìž ê¸ˆ í•´ì œ ìš”ì² ë§í¬ë¥¼ ìƒì„±í•˜ë„ë¡ í—ˆìš©í•˜ë ¤ë©´ ì´ ë°©ë²•ì„ í™•ì¸í•©ë‹ˆë‹¤. 사ì´íŠ¸ì— 기본 방화벽 보호를 ì ìš©í•˜ë ¤ëŠ” 경우 ì´ ë°©ë²•ì„ í™•ì¸í•©ë‹ˆë‹¤. 디버그 ë¡œê¹…ì„ ì‚¬ìš©í• ë•Œ ì›Œë“œí”„ë ˆìŠ¤ê°€ 만드는 debug.log 파ì¼ì— 대한 액세스를 ì°¨ë‹¨í•˜ë ¤ë©´ ì´ ì˜µì…˜ì„ í™•ì¸í•©ë‹ˆë‹¤. 디버그를 사용하ë„ë¡ ì„¤ì •í•˜ë ¤ë©´ ì´ ë°©ë²•ì„ í™•ì¸í•©ë‹ˆë‹¤. ë¬¸ì œ ë””ë²„ê¹…ì„ ì™„ë£Œí•œ 후ì—ë„ ì´ ì˜µì…˜ì„ ì‚¬ìš©í•˜ì§€ ì•Šë„ë¡ ì„¤ì •í•´ì•¼ 합니다. 아래 ì„¤ì •ì— ì§€ì •ëœ ì„ íƒí•œ IP 주소 ë°/ë˜ëŠ” ì‚¬ìš©ìž ì—ì´ì „íŠ¸ì˜ ê¸ˆì§€(ë˜ëŠ” 블랙리스트)를 사용하ë„ë¡ ì„¤ì •í•˜ë ¤ëŠ” 경우 ì´ ì˜µì…˜ì„ í™•ì¸í•©ë‹ˆë‹¤. ì´ë¦„ 바꾸기 페ì´ì§€ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë„ë¡ ì„¤ì •í•˜ë ¤ë©´ ì´ ë°©ë²•ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. 아래 ì„¤ì •ì— ì§€ì •ëœ ì„ íƒí•œ IP ì£¼ì†Œì˜ í™”ì´íŠ¸ë¦¬ìŠ¤íŒ…ì„ ì‚¬ìš©í•˜ë„ë¡ ì„¤ì •í•˜ë ¤ë©´ ì´ ì˜µì…˜ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. êµ¬ì„±ëœ ì‹œê°„ ì´í›„ì— WP 사용ìžë¥¼ ê°•ì œë¡œ 로그아웃하ë„ë¡ í•˜ë ¤ë©´ ì´ ë°©ë²•ì„ í™•ì¸í•©ë‹ˆë‹¤. ë‹¤ìŒ WP 함수ì—ì„œ ìƒì„±ëœ ì‚¬ìš©ìž ì§€ì • ë¡œê·¸ì¸ ì–‘ì‹ì— 보안 문ìžë¥¼ ì‚½ìž…í•˜ë ¤ëŠ” 경우 wp_login_form() 워드 í”„ë ˆìŠ¤ ì‚¬ìš©ìž ë“±ë¡ íŽ˜ì´ì§€ì— captcha ì–‘ì‹ì„ ì‚½ìž…í•˜ë ¤ëŠ” 경우 (ì‚¬ìš©ìž ë“±ë¡ì„ 허용하는 경우)ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— 캡차 ì–‘ì‹ì„ ì‚½ìž…í•˜ë ¤ëŠ” 경우 ì´ ë°©ë²•ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. 비밀번호 찾기 페ì´ì§€ì— 보안 ë¬¸ìž ì–‘ì‹ì„ ì‚½ìž…í•˜ë ¤ëŠ” 경우 ì´ ë°©ë²•ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. ì‹œìŠ¤í…œì— ì¡´ìž¬í•˜ì§€ 않는 ì‚¬ìš©ìž ì´ë¦„으로 ë¡œê·¸ì¸ ì‹œë„를 즉시 ìž ê·¸ë ¤ë©´ ì´ ë°©ë²•ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. 브루트 í¬ìŠ¤ 공격으로부터 ë¡œê·¸ì¸ íŽ˜ì´ì§€ë¥¼ ë³´í˜¸í•˜ë ¤ë©´ ì´ ë°©ë²•ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. ë¡œê·¸ì¸ ì‹œë„ê°€ 최대 실패로 ì¸í•´ 다른 ì‚¬ëžŒì´ ìž ê¸´ 경우 ì´ë©”ì¼ì„ ìˆ˜ì‹ í•˜ë ¤ëŠ” 경우 ì´ ë°©ë²•ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. ë¡œê·¸ì¸ ì‹œë„ê°€ ì‹¤íŒ¨í• ë•Œ ì¼ë°˜ 오류 메시지를 í‘œì‹œí•˜ë ¤ëŠ” 경우 ì´ ë°©ë²•ì„ í™•ì¸í•©ë‹ˆë‹¤. 사ì´íŠ¸ì—ì„œ AJAX ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ëŠ”ì§€ 확ì¸í•©ë‹ˆë‹¤. ìœ í˜• "보기"ì˜ MySQL í…Œì´ë¸”ì„ í™•ì¸í•©ë‹ˆë‹¤.. 특수 URLì— ì•¡ì„¸ìŠ¤í•˜ëŠ” ë° ì‚¬ìš©í• ìˆ˜ 있는 ìœ ìˆ˜ 문ìžë¡œ êµ¬ì„±ëœ ë¹„ë°€ 단어를 ì„ íƒí•©ë‹ˆë‹¤. 추측하기 ì–´ë ¤ìš´ 단어를 ì„ íƒí•˜ëŠ” ê²ƒì´ ì¢‹ìŠµë‹ˆë‹¤. 아래 ë²„íŠ¼ì„ í´ë¦í•˜ì—¬ 현재 활성 ì¤‘ì¸ wp-config.php 파ì¼ì˜ ë‚´ìš©ì„ ë°±ì—…í•˜ê³ ë‹¤ìš´ë¡œë“œí•©ë‹ˆë‹¤. 아래 ë²„íŠ¼ì„ í´ë¦í•˜ì—¬ 현재 활성 .htaccess 파ì¼ì„ ë°±ì—…í•˜ê³ ì €ìž¥í•©ë‹ˆë‹¤. 아래 ë²„íŠ¼ì„ í´ë¦í•˜ì—¬ 마지막 검사ì—ì„œ ì €ìž¥ëœ íŒŒì¼ ë³€ê²½ 결과를 봅니다. í•œ ë²ˆì— ëª¨ë“ ì‹¤íŒ¨í•œ ë¡œê·¸ì¸ ë ˆì½”ë“œë¥¼ ì‚ì œí•˜ë ¤ë©´ ì´ ë‹¨ì¶”ë¥¼ í´ë¦í•©ë‹ˆë‹¤. XMLRPCì— ëŒ€í•œ 액세스를 ì™„ì „ížˆ 차단합니다. ì¿ í‚¤ 기반 무차별 í¬ìŠ¤ ë¡œê·¸ì¸ ë°©ì§€ ì¿ í‚¤ 기반 무차별 ë¬´ë ¥ 예방 ê°€ì ¸ì˜¤ê¸° ë°ì´í„° 복사/붙여넣기 .htaccess 파ì¼ì—ì„œ ì¿ í‚¤ 기반 ì§€ì¹¨ì„ ì‚ì œí• ìˆ˜ 없습니다. íŒŒì¼ ê¶Œí•œì„ í™•ì¸í•˜ì‹ì‹œì˜¤. .htaccess 파ì¼ì— 쓸 수 없습니다. íŒŒì¼ ê¶Œí•œì„ í™•ì¸í•˜ì‹ì‹œì˜¤. 중요 기능 ìƒíƒœ 사ì´íŠ¸ì˜ 현재 ì 수: 현재 DB í…Œì´ë¸” ì ‘ë‘사 현재 ìž ê¸´ IP 주소 범위 현재 ìž ê²¨ 있는 IP 주소 ë° ë²”ìœ„ 현재 로그ì¸í•œ ì‚¬ìš©ìž ì‚¬ìš©ìž ì •ì˜ ë¡œê·¸ì¸ ìº¡íƒ€ ì‚¬ìš©ìž ì •ì˜ ë¡œê·¸ì¸ ì–‘ì‹ ìº¡ì°¨ ì„¤ì • ì‚¬ìš©ìž ì§€ì • 규칙 ìƒí™©íŒ ë°ì´í„°ë² ì´ìŠ¤ 보안 DB 백업 DB ì ‘ë‘사 DB ì ‘ë‘사 옵션 ë°ì´í„°ë² ì´ìŠ¤ 보안 ë‚ ì§œ ì¼ ë””ë²„ê·¸ ì„¤ì • 실패한 ë¡œê·¸ì¸ ë ˆì½”ë“œ ëª¨ë‘ ì‚ì œ ëª¨ë“ ë°©í™”ë²½ 규칙 비활성화 ëª¨ë“ ë³´ì•ˆ 기능 비활성화 XMLRPCì—ì„œ Pingback 기능 비활성화 보안 기능 비활성화 ì¼ë°˜ 오류 메시지 표시 표시 ì´ë¦„ 악성 코드는 ëŠìž„ì—†ì´ ë³€í™”í•˜ê³ ë³µìž¡í•œ 특성으로 ì¸í•´ ë…립 형 플러그ì¸ì„ 사용하여 ì´ëŸ¬í•œ ê²ƒë“¤ì„ ê²€ì‚¬í•˜ëŠ” ê²ƒì€ ì•ˆì •ì 으로 ìž‘ë™í•˜ì§€ 않습니다. ì´ê²ƒì€ ì •ê¸°ì 으로 사ì´íŠ¸ì˜ 외부 검사를 통해 수행 하는 ê²ƒì´ ê°€ìž¥ 좋습니다. ì•…ì˜ì ì¸ ìžë™í™” ëœ ë¡œë´‡ì„ í†µí•´ 사ì´íŠ¸ì—ì„œ ë°œìƒí•˜ëŠ” ë™ì‹œ ë¡œê·¸ì¸ ì‹œë„ê°€ ìžˆì„ ìˆ˜ 있으므로 ì„œë²„ì˜ ë©”ëª¨ë¦¬ì™€ 성능ì—ë„ ë¶€ì •ì ì¸ ì˜í–¥ì„ 미칩니다. ê° IP 주소는 새 ì¤„ì— ìžˆì–´ì•¼ 합니다. ê° ì‚¬ìš©ìž ì—ì´ì „트 문ìžì—´ì€ 새 ì¤„ì— ìžˆì–´ì•¼ 합니다. ì´ë©”ì¼ ì£¼ì†Œ 맞춤형 ë¡œê·¸ì¸ ì–‘ì‹ì— 보안 ë¬¸ìž ì‚¬ìš© ë¡œê·¸ì¸ íŽ˜ì´ì§€ì—ì„œ Captcha 사용 암호 분실 페ì´ì§€ì—ì„œ 보안 ë¬¸ìž í™œì„±í™” 등ë¡ì‹œ 보안 ë¬¸ìž ì‚¬ìš© IP ë˜ëŠ” ì‚¬ìš©ìž ì—ì´ì „트 블랙리스트 사용 IP í™”ì´íŠ¸ë¦¬ìŠ¤íŒ… 활성화 ìžë™ íŒŒì¼ ë³€ê²½ ê°ì§€ 검색 활성화 기본 방화벽 사용 기본 방화벽 보호 활성화 무차별 ë¬´ë ¥ 공격 방지 활성화 디버그 사용 ê°•ì œ WP ì‚¬ìš©ìž ë¡œê·¸ì•„ì›ƒ 사용 ë¡œê·¸ì¸ í—ˆë‹ˆíŒŸ 사용 ì´ë¦„ 바꾸기 페ì´ì§€ 기능 사용 ì´ë¦„ 바꾸기 페ì´ì§€ 기능 사용 IP 주소 ìž…ë ¥: íŒŒì¼ ë³€ê²½ 검색 검색ì—ì„œ ì œì™¸í•˜ë ¤ëŠ” 새 ì¤„ì— ê° íŒŒì¼ ë˜ëŠ” ë””ë ‰í„°ë¦¬ë¥¼ ìž…ë ¥í•©ë‹ˆë‹¤. íŒŒì¼ ë³€ê²½ 검색검색ì—ì„œ ì œì™¸í•˜ë ¤ëŠ” 새 ì¤„ì— ê° íŒŒì¼ ìœ í˜• ë˜ëŠ” í™•ìž¥ì„ ìž…ë ¥í•©ë‹ˆë‹¤. 하나 ì´ìƒì˜ IP 주소 ë˜ëŠ” IP 범위를 ìž…ë ¥í•©ë‹ˆë‹¤. 새 ì¤„ì— í•˜ë‚˜ ì´ìƒì˜ ì´ë©”ì¼ ì£¼ì†Œë¥¼ ìž…ë ¥í•©ë‹ˆë‹¤. 하나 ì´ìƒì˜ ì‚¬ìš©ìž ì—ì´ì „트 문ìžì—´ì„ ìž…ë ¥í•©ë‹ˆë‹¤. ì‚¬ìš©ìž ì—ì´ì „트 ìž…ë ¥: í™”ì´íŠ¸ë¦¬ìŠ¤íŠ¸ IP 주소 ìž…ë ¥: 오류 - í…Œì´ë¸”ì„ ì–»ì„ ìˆ˜ 없거나 í…Œì´ë¸”ì„ ì°¾ì„ ìˆ˜ 없습니다! 새 meta_key = %s, ì´ì „ meta_key = %s ë° user_id = %sê°€ 있는 user_meta í…Œì´ë¸”ì„ ì—…ë°ì´íŠ¸í•˜ëŠ” 오류입니다. 예 1 - 차단하는 ë‹¨ì¼ ì‚¬ìš©ìž ì—ì´ì „트 문ìžì—´: 예 1: 195.47.89.* 예 2 - ì°¨ë‹¨í• ì‚¬ìš©ìž ì—ì´ì „트 문ìžì—´ì´ 1ê°œ ì´ìƒ 나열ë©ë‹ˆë‹¤. 示例 2：195.47.*.* 示例 3：195.*.*.* 예: 스ìºë„ˆê°€ 다른 ë””ë ‰í„°ë¦¬ ë˜ëŠ” ì „ì²´ ë””ë ‰í„°ë¦¬ì˜ íŠ¹ì • 파ì¼ì„ ë¬´ì‹œí•˜ë ¤ë©´ 다ìŒì„ ìž…ë ¥í•©ë‹ˆë‹¤. 예: 스ìºë„ˆê°€ jpg, png ë° bmp ìœ í˜• ì˜ íŒŒì¼ì„ ë¬´ì‹œí•˜ë ¤ë©´ 다ìŒì„ ìž…ë ¥í•©ë‹ˆë‹¤. 실패한 ë¡œê·¸ì¸ ë ˆì½”ë“œ wp-config.php 파ì¼ì˜ ë°±ì—…ì„ í•˜ì§€ 못했습니다. ì´ ìž‘ì—…ì€ ì§„í–‰ë˜ì§€ 않습니다. íŒŒì¼ ë³€ê²½ ê°ì§€ íŒŒì¼ ë³€ê²½ 검색 ì„¤ì • íŒŒì¼ ê¶Œí•œ íŒŒì¼ ì‚¬ìš© 권한 íŒŒì¼ ê¶Œí•œ 검사 ë¬´ì‹œí• íŒŒì¼ ìœ í˜• ë¬´ì‹œí• íŒŒì¼/ë””ë ‰í„°ë¦¬ íŒŒì¼ ì‹œìŠ¤í…œ 보안 íŒŒì¼ ì‹œìŠ¤í…œ 보안 방화벽 방화벽 ì„¤ì • 팔로우 예를 들어 ì„¤ì • í•ëª©ì´ ë„ë©”ì¸ URLì— ì˜ì¡´í•˜ëŠ” 경우 다른 ë„ë©”ì¸ì´ 있는 사ì´íŠ¸ë¡œ ê°€ì ¸ì˜¬ ë•Œ ì œëŒ€ë¡œ ìž‘ë™í•˜ì§€ ì•Šì„ ìˆ˜ 있습니다. For information, updates and documentation, please visit the ê°•ì œ 로그아웃 ì‚¬ìš©ìž ë¡œê·¸ì•„ì›ƒ 옵션 ê°•ì œ 지금부터 ë‹¤ìŒ URLì„ ì‚¬ìš©í•˜ì—¬ WP 관리ìžì— 로그ì¸í•´ì•¼ 합니다. ì¼ë°˜ ì„¤ì • 새 DB í…Œì´ë¸” ì ‘ë‘사 ìƒì„± 개발ìžì— 대해 알아가기 ìžì„¸í•œ ë‚´ìš©ì„ ë³´ë ¤ë©´ %s 메뉴로 ì´ë™ 해커는 다ìŒê³¼ ê°™ì€ ì—¬ëŸ¬ 가지 방법으로 워드 í”„ë ˆìŠ¤ XML-RPC APIì˜ ë‹¤ì–‘í•œ 취약ì ì„ ì•…ìš© í• ìˆ˜ 있습니다. ìœ ìš©í•œ íŒ: 허니팟(Honeypot) 호스트 시스템 로그 시간 그러나 때로는 사람 ë˜ëŠ” 다른 플러그ì¸ì´ ìž˜ëª»ëœ ê¶Œí•œ ê°’ì„ ì„ íƒí–ˆê¸° ë•Œë¬¸ì— ì‚¬ì´íŠ¸ë¥¼ ëœ ì•ˆì „í•˜ê²Œ 만들 수 있ë„ë¡ íŠ¹ì • 핵심 WP í´ë” ë˜ëŠ” 파ì¼ì˜ 다양한 권한 ì„¤ì •ì„ ìˆ˜ì •í•©ë‹ˆë‹¤. IP IP 주소: IP ë˜ëŠ” ì‚¬ìš©ìž ì—ì´ì „트 블랙리스트 사용 IP 호스트 ë° ì‚¬ìš©ìž ì—ì´ì „트 블랙리스트 ì„¤ì • IP 범위: 기회가 주어진 경우 해커는 ìžì‹ ì˜ ì½”ë“œ ë˜ëŠ” 파ì¼ì„ ì‹œìŠ¤í…œì— ì‚½ìž…í• ìˆ˜ 있으며, ì´ íŒŒì¼ì„ ì‹œìŠ¤í…œì— ì‚½ìž…í•˜ì—¬ 사ì´íŠ¸ì—ì„œ ì•…ì˜ì ì¸ í–‰ìœ„ë¥¼ 수행하는 ë° ì‚¬ìš©í• ìˆ˜ 있습니다. íŠ¹ì • IP ì£¼ì†Œì— ëŒ€í•œ ë¡œê·¸ì¸ ì‹œë„ê°€ 최대 실패한 경우 ì´ ê¸°ê°„ ë‚´ì— í”ŒëŸ¬ê·¸ì¸ì´ 해당 주소를 ìž ê·¸ê²Œ ë©ë‹ˆë‹¤. 게시물ì´ë‚˜ 페ì´ì§€ì— 대해 WordPress 암호 보호 ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ì§€ 않는 경우 ì´ í™•ì¸ëž€ì„ 사용하지 ì•Šë„ë¡ ë‘는 ê²ƒì´ ì¢‹ìŠµë‹ˆë‹¤. ì´ í”ŒëŸ¬ê·¸ì¸ì—ì„œ 활성화 ëœ ë³´ì•ˆ 기능으로 ì¸í•´ 사ì´íŠ¸ì˜ ì¼ë¶€ í”ŒëŸ¬ê·¸ì¸ ê¸°ëŠ¥ì´ ì†ìƒëœ 것으로 ìƒê°ë˜ë©´ ë‹¤ìŒ ì˜µì…˜ì„ ì‚¬ìš©í•˜ì—¬ì´ í”ŒëŸ¬ê·¸ì¸ì˜ ëª¨ë“ ë³´ì•ˆ ê¸°ëŠ¥ì„ ë•ë‹ˆë‹¤. Jetpack ë˜ëŠ” WP iOS ë˜ëŠ” WP XML-RPC ê¸°ëŠ¥ì´ í•„ìš”í•œ 기타 ì•±ì„ ì‚¬ìš©í•˜ëŠ” 경우 ì´ ê¸°ëŠ¥ì„ í™•ì¸í•©ë‹ˆë‹¤. ì´ë ‡ê²Œ 하면 ì›Œë“œí”„ë ˆìŠ¤ í•‘ë°± 취약ì ì„ ë³´í˜¸í• ìˆ˜ 있습니다. íŒŒì¼ ê°€ì ¸ì˜¤ê¸° ê°€ì ¸ì˜¤ê¸°/내보내기 ì¼ë°˜ì 으로 워드 í”„ë ˆìŠ¤ 코어 ë° í”ŒëŸ¬ê·¸ì¸ íŒŒì¼ ë° ".php" ë˜ëŠ” ".js"와 ê°™ì€ íŒŒì¼ ìœ í˜•ì€ ìžì£¼ 변경ë˜ì§€ 않아야하며, ê·¸ë ‡ê²Œ í• ë•Œ ë³€ê²½ì´ ë°œìƒí•˜ê³ ì–´ë–¤ 파ì¼ì´ ì˜í–¥ì„ ë°›ì€ ì§€ ì•Œ 수 있어야 합니다. 줄당 í•˜ë‚˜ì˜ ì‚¬ìš©ìž ì´ë¦„ì„ ì‚½ìž…í•©ë‹ˆë‹¤. 목ë¡ì— 있는 경우ì—ë„ ê¸°ì¡´ ì‚¬ìš©ìž ì´ë¦„ì€ ì°¨ë‹¨ë˜ì§€ 않습니다. 즉시 ìž˜ëª»ëœ ì‚¬ìš©ìž ì´ë¦„ì„ ìž ê·¸ê¸° íŠ¹ì • ì‚¬ìš©ìž ì´ë¦„ì„ ì¦‰ì‹œ ìž ê·¸ê¸° 중급 ì¸í„°ë„· ë´‡ ì´ URL ê°’ì„ ìžŠì–´ë²„ë¦° 경우 ì–´ë”˜ê°€ì— ì €ìž¥í•˜ëŠ” ê²ƒì´ ì¤‘ìš”í•©ë‹ˆë‹¤. ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ê¸° ì „ì— %s를 수행하는 ê²ƒì´ ì¢‹ìŠµë‹ˆë‹¤. 마지막 5 ë¡œê·¸ì¸ ë§ˆì§€ë§‰ 5 ê°œì˜ ë¡œê·¸ì¸ ìš”ì•½: ìµœì‹ íŒŒì¼ ë³€ê²½ 검사 ê²°ê³¼ ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ì§€ ì•Šë„ë¡ ë‘ê³ pingback 보호를 ì›í•˜ì§€ë§Œ ì—¬ì „ížˆ XMLRPCê°€ 필요한 경우 아래 ê¸°ëŠ¥ì„ ì‚¬ìš©í•©ë‹ˆë‹¤. ê´€ë¦¬ìž ê³„ì • ëª©ë¡ ìž ê¸´ IP 주소 로그ì¸í•œ ì‚¬ìš©ìž ë¡œê·¸ì¸ ìº¡ì± ë¡œê·¸ì¸ IP 허용 ëª©ë¡ ì„¤ì • ë¡œê·¸ì¸ IP í™”ì´íŠ¸ë¦¬ìŠ¤íŒ… ë¡œê·¸ì¸ ì–‘ì‹ ìº¡ì°¨ ì„¤ì • ë¡œê·¸ì¸ íŽ˜ì´ì§€ URL ë¡œê·¸ì¸ ìž¬ì‹œë„ ê¸°ê°„(최소) ë¡œê·¸ì¸ í—ˆìš© ëª©ë¡ XX 분 후 WP ì‚¬ìš©ìž ë¡œê·¸ì•„ì›ƒ 비밀번호 찾기 ì–‘ì‹ì— 보안 ë¬¸ìž ì„¤ì • ìœ ì§€ê´€ë¦¬ ìœ ì§€ê´€ë¦¬ 모드 현재 ìœ ì§€ 관리 모드가 활성화ë˜ì–´ 있습니다. 완료ë˜ë©´ 꺼야 합니다. ìœ ì§€ 관리 모드가 현재 í•´ì œë˜ì—ˆìŠµë‹ˆë‹¤. ìœ ì§€ 관리 모드 ìƒíƒœ 악성 코드 검사 ìˆ˜ë™ ìŠ¹ì¸ ìˆ˜ë™ ë°±ì—… ìˆ˜ë™ íŒŒì¼ ë³€ê²½ ê°ì§€ 스캔 최대 ë¡œê·¸ì¸ ì‹œë„ ê¸°íƒ€ì„¤ì • ë”보기 ë‚´ 사ì´íŠ¸ëŠ” AJAX를 사용하는 테마 ë˜ëŠ” 플러그ì¸ì´ 있습니다. ë‚´ 사ì´íŠ¸ì—는 암호로 ë³´í˜¸ëœ ê²Œì‹œë¬¼ ë˜ëŠ” 페ì´ì§€ê°€ 있습니다. ì°¸ê³ : ê°€ì ¸ì˜¤ê¸° ì „ì— ê°€ì ¸ì˜¤ë ¤ëŠ” ì„¤ì •ì„ íŒŒì•…í•˜ëŠ” ê²ƒì€ ì‚¬ìš©ìžì˜ 책임입니다. ì„¤ì •ì„ ë§¹ëª©ì 으로 ê°€ì ¸ì˜¤ë©´ 사ì´íŠ¸ì—ì„œ ìž ê¸¸ 수 있습니다. ì°¸ê³ : WPEngine ë˜ëŠ” 서버 ìºì‹±ì„ 수행하는 공급ìžì—ì„œ 사ì´íŠ¸ë¥¼ 호스팅하는 경우 호스트 ì§€ì› ì‚¬ëžŒë“¤ì—게 ì´ë¦„ì´ ë³€ê²½ëœ ë¡œê·¸ì¸ íŽ˜ì´ì§€ë¥¼ ìºì‹œí•˜ì§€ ì•Šë„ë¡ ìš”ì²í•´ì•¼ 합니다. ì°¸ê³ : Jetpack ë˜ëŠ” ì›Œë“œí”„ë ˆìŠ¤ iOS ë˜ëŠ” 기타 ì•±ì„ ì‚¬ìš©í•˜ëŠ” 경우 ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë„ë¡ ì„¤ì •í•˜ì§€ë§Œ "XMLRPCì— ëŒ€í•œ ì™„ì „ížˆ 차단" 확ì¸ëž€ì„ ì„ íƒí•˜ì§€ ì•Šì€ ìƒíƒœë¡œ ë‘어야 합니다. ì°¸ê³ : ì´ ê¸°ëŠ¥ì€ .htaccess 파ì¼ì„ 사용하여 IP 주소를 ì˜êµ¬ì 으로 차단하지 않으므로 WordPress를 실행하는 ëª¨ë“ ì›¹ 서버와 호환ë˜ì–´ì•¼ 합니다. ì°¸ê³ : 현재 WordPress 설치ì—ì„œ XML-RPC ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ì§€ 않는 경우ì—만 ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë„ë¡ ì„¤ì •í•´ì•¼ 합니다. ì´ë¦„ 필요한 조치가 없습니다. 필요한 조치가 없습니다. 필요한 조치가 없습니다. ë°ì´í„°ê°€ 없습니다 NONCE 는 DB ì ‘ë‘사 변경 ìž‘ì—…ì— ëŒ€í•œ 실패 확ì¸! Nonce í™•ì¸ ìˆ˜ë™ DB 백업 ìž‘ì—…ì— ëŒ€ í•œ 실패! Nonce í™•ì¸ ìˆ˜ë™ íŒŒì¼ ë³€ê²½ ê°ì§€ 검사 ìž‘ì—…ì— ëŒ€ í•œ 실패! ì¼ë°˜ì 으로 WordPressì— ë¡œê·¸ì¸í•˜ë ¤ëŠ” 경우 사ì´íŠ¸ì˜ 홈 URLì„ ìž…ë ¥í•œ ë‹¤ìŒ wp-login.php를 ìž…ë ¥í•©ë‹ˆë‹¤. ì´ë©”ì¼ë¡œ 알림 ì¼ì‹œì 으로 ìž ê¸´ IP 주소 수: 현재 사ì´íŠ¸ì— 로그ì¸í•œ ì‚¬ìš©ìž ìˆ˜(íšŒì› í¬í•¨): ë˜ëŠ” 종종 악성 코드는 사ì´íŠ¸ì— 삽입 ëœ ê²½ìš° ë‹¹ì‹ ì€ ì¼ë°˜ì 으로 ì™¸ëª¨ì— ë”°ë¼ ì¼ë°˜ ì•„ë¬´ê²ƒë„ í†µì§€í•˜ì§€ 않습니다, 하지만 사ì´íŠ¸ì˜ 검색 ìˆœìœ„ì— ê·¹ì ì¸ ì˜í–¥ì„ ë¯¸ì¹ ìˆ˜ 있습니다. DBì— ëŒ€í•œ 보호 ê³„ì¸µì„ ì¶”ê°€í•˜ëŠ” í•œ 가지 ë°©ë²•ì€ ê¸°ë³¸ 워드 í”„ë ˆìŠ¤ í…Œì´ë¸” ì ‘ë‘사를 "wp_"ì—ì„œ 해커가 추측하기 ì–´ë ¤ìš´ 다른 것으로 변경하는 것입니다. PHP íŒŒì¼ íŽ¸ì§‘ 페ì´ì§€ 비밀번호 비밀번호 보안수준 암호 ê°•ë„ ë„구 암호 ë„구 ì¿ í‚¤ 테스트 수행 지금 검사 수행 ì˜êµ¬ ë¸”ë¡ ëª©ë¡ ì˜êµ¬ì 으로 ì°¨ë‹¨ëœ IP 주소 ìœ„ì˜ í…Œì´ë¸”ì— ëŒ€í•´ 수ë™ìœ¼ë¡œ ì ‘ë‘사를 변경하ì‹ì‹œì˜¤: %s ë³µì›í•˜ë ¤ë©´ .htaccess를 ì„ íƒí•˜ì‹ì‹œì˜¤. ë³µì›í•˜ë ¤ë©´ wp-config.php 파ì¼ì„ ì„ íƒí•˜ì‹ì‹œì˜¤. ì˜¬ë°”ì€ ì´ë©”ì¼ ì£¼ì†Œë¥¼ ìž…ë ¥í•˜ì„¸ìš” DB ì ‘ë‘ì‚¬ê°’ì„ ìž…ë ¥í•˜ì‹ì‹œì˜¤. ë¡œê·¸ì¸ íŽ˜ì´ì§€ ìŠ¬ëŸ¬ê·¸ì— ëŒ€í•œ ê°’ì„ ìž…ë ¥í•˜ì‹ì‹œì˜¤. 숫ìžë¡œ ë‹µë³€ì„ ìž…ë ¥í•˜ì‹ì‹œì˜¤. ì´ë©”ì¼ ì£¼ì†Œë¥¼ ìž…ë ¥í•˜ë©´ ìž ê¸ˆì„ í•´ì œí•˜ëŠ” ë°©ë²•ì— ëŒ€í•œ ì§€ì¹¨ì´ ìžˆëŠ” ì´ë©”ì¼ì„ 받게 ë©ë‹ˆë‹¤. í•«ë§í¬ 방지 Re-direct URL 해커 나 악성 ë´‡ì„ ë‹¤ì‹œ "http://127.0.0.1"ë¡œ ë¦¬ë””ë ‰ì…˜í•˜ëŠ” ê²ƒì€ ìžì‹ ì˜ ë¡œì»¬ 호스트로 다시 íŽ¸í–¥í•˜ê³ ëŒ€ì‹ ì„œë²„ì˜ ë¶€í•˜ë¥¼ 넣기 ë•Œë¬¸ì— ì´ìƒì 입니다. ë°ì´í„° 새로 ê³ ì¹¨ ì‚¬ìš©ìž ë°ì´í„°ì— 로그ì¸í•œ 새로 ê³ ì¹¨ ë“±ë¡ ìº¡ì°¨ ë“±ë¡ ìŠ¹ì¸ ë“±ë¡ íŽ˜ì´ì§€ 캡차 ì„¤ì • ë¡œê·¸ì¸ íŽ˜ì´ì§€ 주소 변경 ë¡œê·¸ì¸ íŽ˜ì´ì§€ 주소 변경 ì„¤ì • ìž ê¸ˆ í•´ì œ ìš”ì² .htaccess íŒŒì¼ ë³µì› ë°±ì—…ëœ .htaccess 파ì¼ì—ì„œ ë³µì› ë°±ì—…ëœ wp-config 파ì¼ì—ì„œ ë³µì› wp-config íŒŒì¼ ë³µì› ê¸°ë³¸ 방화벽 ì„¤ì • ì €ìž¥ 디버그 ì„¤ì • ì €ìž¥ 기능 ì„¤ì • ì €ìž¥ ì„¤ì • ì €ìž¥ 현재 .htaccess íŒŒì¼ ì €ìž¥ 현재 wp-config.php íŒŒì¼ ì €ìž¥ 검사 완료 - íŒŒì¼ ë³€ê²½ 사í•ì´ 검색ë˜ì§€ 않았습니다! 스캔 시간 간격 스ìºë„ˆ 악성 코드 검사중 암호 ë¬¸ìž ë³´ì•ˆ 지ì ê³ ìž¥ 보안 ê°•ë„ ê³„ìˆ˜ ë³€ê²½ì´ ê°ì§€ë˜ë©´ ì´ë©”ì¼ ë³´ë‚´ê¸° ì¼ì‹œì 으로 ì‚¬ìš©í• ìˆ˜ 없는 서비스 검사를 ìˆ˜í–‰í•˜ë ¤ëŠ” 빈ë„ì— ëŒ€í•œ ê°’ì„ ì„¤ì •í•©ë‹ˆë‹¤. IP 주소가 ìž ê¸°ê¸° ì „ì— ìµœëŒ€ ë¡œê·¸ì¸ ë¦¬íŠ¸ë¦¬ì— ëŒ€í•œ ê°’ì„ ì„¤ì •í•©ë‹ˆë‹¤. ì„¤ì • ì„¤ì •ì€ ì €ìž¥ë˜ì§€ 않았습니다 - ë‹¹ì‹ ì˜ ë¹„ë°€ 단어는 ì˜ìˆ«ìž 문ìž, 즉, ë¬¸ìž ë° / ë˜ëŠ” 숫ìžë¡œë§Œ 구성해야합니다! ì„¤ì •ì´ ì„±ê³µì 으로 ì—…ë°ì´íŠ¸ ë˜ì—ˆìŠµë‹ˆë‹¤. ì„¤ì •ì´ ì €ìž¥ë˜ì—ˆìŠµë‹ˆë‹¤ 사ì´íŠ¸ ìž ê¸ˆ 알림 현장 ëŒ€ì‘ ì‹œê°„ ëª¨ë‹ˆí„°ë§ ì‚¬ì´íŠ¸ ê°€ë™ ì‹œê°„ ëª¨ë‹ˆí„°ë§ ìŠ¤íŒ¸ 예방 스팸 예방 해커가 WordPress ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— ì•¡ì„¸ìŠ¤í•˜ë ¤ê³ í• ë•Œë¡œ ë¦¬ë””ë ‰ì…˜í• URLì„ ì§€ì •í•©ë‹ˆë‹¤. 입소문 내기 암호 ìž…ë ¥ì„ ì‹œìž‘í•©ë‹ˆë‹¤. 시작 DB ì ‘ë‘사 변경 ìž‘ì—…..... "íŒŒì¼ ë³€ê²½ ê°ì§€ 기능"ì€ ì‹œìŠ¤í…œ 파ì¼ì˜ ì •ê¸°ì ì¸ ìžë™ ë˜ëŠ” ìˆ˜ë™ ìŠ¤ìº”ì„ ìˆ˜í–‰í•˜ì—¬ 파ì¼ì˜ 추가 ë° ì‚ì œë¥¼ í¬í•¨í•˜ì—¬ 시스템ì—ì„œ ë°œìƒí•˜ëŠ” íŒŒì¼ ë³€ê²½ 사í•ì„ ì•Œë ¤ì¤ë‹ˆë‹¤. %s 피ì³ëŠ” 현재 활성 ìƒíƒœìž…니다. ì´ì „ DB ì ‘ë‘ì‚¬ì— ëŒ€í•œ 참조가 있는 %s í…Œì´ë¸” ë ˆì½”ë“œê°€ 성공ì 으로 ì—…ë°ì´íŠ¸ë˜ì—ˆìŠµë‹ˆë‹¤! All In One WP 보안 블랙리스트 ê¸°ëŠ¥ì€ íŠ¹ì • 호스트 IP 주소 ë˜ëŠ” 범위 ë° ì‚¬ìš©ìž ì—ì´ì „트를 금지하는 ì˜µì…˜ì„ ì œê³µí•©ë‹ˆë‹¤. ëª¨ë“ WP 보안 í™”ì´íŠ¸ë¦¬ìŠ¤íŠ¸ ê¸°ëŠ¥ì€ íŠ¹ì • IP 주소 ë˜ëŠ” 범위만 WordPress ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— ì•¡ì„¸ìŠ¤í• ìˆ˜ 있ë„ë¡ í—ˆìš©í•˜ëŠ” ì˜µì…˜ì„ ì œê³µí•©ë‹ˆë‹¤. ì—¬ê¸°ì— ì§€ì •ëœ URLì€ ì‚¬ì´íŠ¸ì˜ URLì¼ ìˆ˜ 있으며 ì‚¬ìš©ìž ê³ ìœ ì˜ URLì¼ í•„ìš”ëŠ” 없습니다. 예를 들어 ì›í•˜ëŠ” ë§Œí¼ ì°½ì˜ì ì´ë©° 해커를 CIA ë˜ëŠ” NSA 홈 페ì´ì§€ë¡œ 보낼 수 있습니다. ìœ„ì˜ ë°©í™”ë²½ ê¸°ëŠ¥ì€ .htaccess 파ì¼ì„ 통해 ì ìš©ë˜ë©° 사ì´íŠ¸ì˜ ì „ë°˜ì ì¸ ê¸°ëŠ¥ì—ì˜í–¥ì„ 미치지 않아야 합니다. ì¿ í‚¤ 테스트는 성공ì ì´ì—ˆìŠµë‹ˆë‹¤. ì´ì œ ì´ ê¸°ëŠ¥ì„ í™œì„±í™”í• ìˆ˜ 있습니다. DB ì ‘ë‘사 변경 ìž‘ì—…ì´ ì™„ë£Œë˜ì—ˆìŠµë‹ˆë‹¤. ì´ ê¸°ëŠ¥ì€ ì—¬ì „ížˆ 사ì´íŠ¸ì—ì„œ XMLRPC ê¸°ëŠ¥ì„ í—ˆìš©í•˜ì§€ë§Œ pingback 메서드를 비활성화합니다. ìœ íš¨í•œ ì´ë©”ì¼ ì£¼ì†Œê°€ 아니므로 ë‹¤ìŒ ì£¼ì†Œê°€ ì‚ì œë˜ì—ˆìŠµë‹ˆë‹¤. í˜¸ìŠ¤íŠ¸ì— ë‹¤ìŒ íŒŒì¼ì´ 추가ë˜ì—ˆìŠµë‹ˆë‹¤. í˜¸ìŠ¤íŠ¸ì— ë‹¤ìŒ íŒŒì¼ì´ 추가ë˜ì—ˆìŠµë‹ˆë‹¤. ì´ì „ DB ì ‘ë‘ì‚¬ì— ëŒ€í•œ 참조가 있는 옵션 í…Œì´ë¸” ë ˆì½”ë“œê°€ 성공ì 으로 ì—…ë°ì´íŠ¸ë˜ì—ˆìŠµë‹ˆë‹¤! %sì— ëŒ€í•œ 사용 ê¶Œí•œì€ %së¡œ 성공ì 으로 변경ë˜ì—ˆìŠµë‹ˆë‹¤. 플러그ì¸ì€ .htaccess 파ì¼ì„ ì ì ˆí•˜ê²Œ ìˆ˜ì •í•˜ì—¬ ì´ë¥¼ 달성합니다. 플러그ì¸ì€ .htaccess 파ì¼ì— ì ì ˆí•œ ì§€ì¹¨ì„ ìž‘ì„±í•˜ì—¬ ì´ë¥¼ 달성합니다. 플러그ì¸ì€ wp-config.php 파ì¼ì— 쓸 수 없다는 ê²ƒì„ ê°ì§€í–ˆìŠµë‹ˆë‹¤. ì´ ê¸°ëŠ¥ì€ í”ŒëŸ¬ê·¸ì¸ì´ wp-config.php 파ì¼ì— 성공ì 으로 쓸 수 있는 경우ì—만 ì‚¬ìš©í• ìˆ˜ 있습니다. 플러그ì¸ì´ 첫 번째 íŒŒì¼ ë³€ê²½ ê°ì§€ ê²€ì‚¬ìž„ì„ ê°ì§€í–ˆìŠµë‹ˆë‹¤. ì´ ê²€ì‚¬ì˜ íŒŒì¼ ì„¸ë¶€ ì •ë³´ëŠ” 향후 ê²€ì‚¬ì— ëŒ€í•œ íŒŒì¼ ë³€ê²½ ë‚´ìš©ì„ ê°ì§€í•˜ëŠ” ë° ì‚¬ìš©ë©ë‹ˆë‹¤! 플러그ì¸ì€ .htaccess 파ì¼ì— 쓸 수 없습니다. 수ë™ìœ¼ë¡œ 파ì¼ì„ 편집하ì‹ì‹œì˜¤. ì„ íƒí•œ IP í•ëª©ì´ 성공ì 으로 ìž ê¸ˆ í•´ì œë˜ì—ˆìŠµë‹ˆë‹¤. ì´ì „ DB ì ‘ë‘ì‚¬ì— ëŒ€í•œ 참조가 있는 사용ìžë©”타 í…Œì´ë¸” ë ˆì½”ë“œê°€ 성공ì 으로 ì—…ë°ì´íŠ¸ë˜ì—ˆìŠµë‹ˆë‹¤! 악성 코드ë¼ëŠ” 단어는 악성 소프트웨어를 ì˜ë¯¸í•©ë‹ˆë‹¤. ê·¸ê²ƒì€ íŠ¸ë¡œì´ ëª©ë§ˆ ê°™ì€ ê²ƒ 들 구성ë 수 있습니다., ì• ë“œì›¨ì–´, 웜, 스파ì´ì›¨ì–´ ë° í•´ì»¤ 웹사ì´íŠ¸ì— 주입 í•˜ë ¤ê³ í•©ë‹ˆë‹¤ 다른 바람ì§í•˜ì§€ ì•Šì€ ì½”ë“œ. 현재 ìž ê²¨ 있는 IP 주소가 없습니다. 현재 로그ì¸í•œ 사ì´íŠ¸ ì „ì²´ì˜ ë‹¤ë¥¸ 사용ìžëŠ” 없습니다. 현재 로그ì¸í•œ 다른 사용ìžëŠ” 없습니다. 마지막 검사 ì´í›„ íŒŒì¼ ë³€ê²½ 사í•ì´ 없습니다. ì´ëŸ¬í•œ ê¸°ëŠ¥ì€ ê¸°ëŠ¥ì 으로 ê´€ë ¨ì´ ì—†ìŠµë‹ˆë‹¤. ë‘ ê°€ì§€ 를 ëª¨ë‘ ì‚¬ì´íŠ¸ì—ì„œ 사용하ë„ë¡ ì„¤ì •í•˜ë©´ 2ê°œì˜ ë³´ì•ˆ ê³„ì¸µì„ ë§Œë“œëŠ” ê²ƒì„ ì˜ë¯¸í•©ë‹ˆë‹¤. ì´ ê¸°ëŠ¥ì€ í•œ 사ì´íŠ¸ì—ì„œ 다른 사ì´íŠ¸ë¡œ ì„¤ì •ì„ ì 용하여 ì‹œê°„ì„ ì ˆì•½í•˜ë ¤ëŠ” ê²½ìš°ì— ìœ ìš©í• ìˆ˜ 있습니다. ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë©´ ë‚˜ì¤‘ì— ë°±ì—…ëœ íŒŒì¼ì„ 다시 사용해야 하는 경우 현재 활성 .htaccess 파ì¼ì„ ë°±ì—…í•˜ê³ ì €ìž¥í• ìˆ˜ 있습니다. ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë©´ ë‚˜ì¤‘ì— ë°±ì—…ëœ íŒŒì¼ì„ 다시 사용해야 하는 경우 현재 활성 ì¤‘ì¸ wp-config.php 파ì¼ì„ ë°±ì—…í•˜ê³ ì €ìž¥í• ìˆ˜ 있습니다. ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë©´ ìžì‹ ì˜ ìŠ¬ëŸ¬ê·¸ë¥¼ ì„¤ì •í•˜ê³ wp-login.php를 í¬í•¨í•˜ëŠ” ë¡œê·¸ì¸ URLì˜ ë§ˆì§€ë§‰ ë¶€ë¶„ì˜ ì´ë¦„ì„ ì›í•˜ëŠ” 문ìžì—´ë¡œ 변경하여 ë¡œê·¸ì¸ URLì„ ë³€ê²½í• ìˆ˜ 있습니다. ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë©´ ì ‘ë‘사를 ì›í•˜ëŠ” ê°’ë˜ëŠ” ì´ í”ŒëŸ¬ê·¸ì¸ìœ¼ë¡œ ì„¤ì •í•œ ìž„ì˜ê°’으로 쉽게 ë³€ê²½í• ìˆ˜ 있습니다. ë˜í•œ ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë©´ ì •ê·œ ìž‘ì—…ì˜ ì¼ë¶€ë¡œ ìžì£¼ 변경ë˜ëŠ” 경우 íŠ¹ì • íŒŒì¼ ì´ë‚˜ í´ë”를 검색ì—ì„œ ì œì™¸í• ìˆ˜ 있습니다. (예를 들어 로그 íŒŒì¼ ë° íŠ¹ì • ìºì‹± í”ŒëŸ¬ê·¸ì¸ íŒŒì¼ì€ ìžì£¼ 변경ë 수 있으므로 íŒŒì¼ ë³€ê²½ 검색ì—ì„œ ì´ëŸ¬í•œ 파ì¼ì„ ì œì™¸í•˜ë„ë¡ ì„ íƒí• 수 있습니다.) ì´ ê¸°ëŠ¥ì€ ì‚¬ì´íŠ¸ì—ì„œ ì œëŒ€ë¡œ ìž‘ë™í•˜ì§€ 않으면 관리ìžì—ì„œ ìž ê¸€ 수 있습니다. ì´ ê¸°ëŠ¥ì„ í™œì„±í™”í•˜ê¸° ì „ì— %s를 ì‚¬ìš©í• ìˆ˜ 있습니다. ì´ ê¸°ëŠ¥ì€ "X-Pingback" í—¤ë”ê°€ 있는 경우ì—ë„ ì œê±°í•©ë‹ˆë‹¤. ì´ ê¸°ëŠ¥ì€ ë¸Œë¼ìš°ì €ì— 특별한 ì¿ í‚¤ê°€ìžˆëŠ” ì‚¬ëžŒë“¤ì„ ì œì™¸í•œ ëª¨ë“ ì‚¬ìš©ìžì˜ 워드 í”„ë ˆìŠ¤ ë¡œê·¸ì¸ íŽ˜ì´ì§€ì— 대한 액세스를 거부합니다. ì´ ê¸°ëŠ¥ì€ ì•„ëž˜ ì„¤ì •ì—ì„œ êµ¬ì„±ëœ ëŒ€ë¡œ í™”ì´íŠ¸ë¦¬ìŠ¤íŠ¸ì— 없는 ëª¨ë“ IP ì£¼ì†Œì— ëŒ€í•œ ë¡œê·¸ì¸ ì•¡ì„¸ìŠ¤ë¥¼ 거부합니다. ì´ ê¸°ëŠ¥ì€ IP 주소 ë˜ëŠ” ì‚¬ìš©ìž ì—ì´ì „트가 아래 ì„¤ì •ì—ì„œ 구성한 것과 ì¼ì¹˜í•˜ëŠ” 사용ìžì˜ ì´ ì‚¬ì´íŠ¸ 액세스를 거부합니다. ì´ ê¸°ëŠ¥ì€ í˜„ìž¬ì´ í”ŒëŸ¬ê·¸ì¸ì—ì„œ í™œì„±í™”ëœ ëª¨ë“ ë°©í™”ë²½ ê·œì¹™ì„ ë¹„í™œì„±í™”í•˜ê³ .htacess 파ì¼ì—ì„œ ì´ëŸ¬í•œ ê·œì¹™ì„ ì‚ì œí•©ë‹ˆë‹¤. 방화벽 규칙 중 하나가 사ì´íŠ¸ì—ì„œ ë¬¸ì œë¥¼ ì¼ìœ¼í‚¨ë‹¤ê³ ìƒê°ë˜ë©´ 사용하ì‹ì‹œì˜¤. ì´ ê¸°ëŠ¥ì€ ì¤‘ìš”í•œ WP 핵심 í´ë”와 파ì¼ì„ ìŠ¤ìº”í•˜ê³ ì•ˆì „í•˜ì§€ ì•Šì€ ëª¨ë“ ê¶Œí•œ ì„¤ì •ì„ ê°•ì¡° 표시합니다. ê°’ì„ ìž…ë ¥í•˜ì§€ 않으면 ì´ í•„ë“œëŠ” 기본값으로 http://127.0.0.1. Googleê³¼ ê°™ì€ ê²€ìƒ‰ ì—”ì§„ì˜ ë´‡ê³¼ 거미는 사ì´íŠ¸ì˜ 페ì´ì§€ë¥¼ ì¸ë±ì‹±í• ë•Œ 맬웨어를 íƒì§€í• 수 있으며, ë”°ë¼ì„œ 웹 사ì´íŠ¸ë¥¼ ë¸”ëž™ë¦¬ìŠ¤íŠ¸ì— í‘œì‹œí•˜ì—¬ 검색 ìˆœìœ„ì— ì˜í–¥ì„ 줄 수 있기 때문입니다. ì´ê²ƒì€ ì¢‹ì€ ë³´ì•ˆ 관행입니다. ì´ ë•Œë¬¸ì— ìš°ë¦¬ëŠ” ë§¤ì¼ í•œ 번 악성 ì½”ë“œì— ëŒ€í•œ 사ì´íŠ¸ë¥¼ ìŠ¤ìº”í•˜ê³ ì•„ë¬´ê²ƒë„ ë°œê²¬í•˜ë©´ ì•Œë ¤ ìš°ë¦¬ì˜ ìžì‹ ì˜ ì„œë²„ì—ì„œ 호스팅ë˜ëŠ” 사용하기 쉬운 스캔 서비스를 만들었습니다. ì´ ì„¹ì…˜ì—서는 ëª¨ë“ WP 보안 ë° ë°©í™”ë²½ ì„¤ì •ì„ ë‚´ë³´ë‚´ê±°ë‚˜ ê°€ì ¸ì˜¬ 수 있습니다. ì´ ì„¤ì •ì„ ì‚¬ìš©í•˜ë©´ ì´ í”ŒëŸ¬ê·¸ì¸ì— 대한 디버그를 활성화/ë¹„í™œì„±í™”í• ìˆ˜ 있습니다. ì´ ì„¤ì •ì€ ì›Œë“œ í”„ë ˆìŠ¤ì˜ XML-RPC ê¸°ëŠ¥ì— ëŒ€í•œ ì±…ìž„ì´ìžˆëŠ” 워드 í”„ë ˆìŠ¤ xmlrpc.php 파ì¼ì— 대한 액세스를 ë¹„í™œì„±í™”í•˜ë ¤ë©´ .htaccessì— ì§€ì‹œë¬¸ì„ ì¶”ê°€í•©ë‹ˆë‹¤. ì´ ì„¤ì •ì€ ì‚¬ì´íŠ¸ì—ì„œ 다ìŒê³¼ ê°™ì€ ê¸°ë³¸ 방화벽 보호 ë©”ì»¤ë‹ˆì¦˜ì„ êµ¬í˜„í•©ë‹ˆë‹¤. ì´ íƒì—는 ì˜êµ¬ì 으로 ì°¨ë‹¨ëœ ëª¨ë“ IP 주소 목ë¡ì´ 표시ë©ë‹ˆë‹¤. ëª¨ë“ WP 보안 ë° ë°©í™”ë²½ ì„¤ì •ì„ ë‚´ë³´ë‚´ë ¤ë©´ 아래 ë²„íŠ¼ì„ í´ë¦í•˜ì‹ì‹œì˜¤. ìžì„¸í•œ ë‚´ìš©ì€ %s를 참조하ì‹ì‹œì˜¤. ìˆ˜ë™ íŒŒì¼ ë³€ê²½ 검색 ìŠ¤ìº”ì„ ìˆ˜í–‰í•˜ë ¤ë©´ 아래 ë²„íŠ¼ì„ í´ë¦í•˜ì‹ì‹œì˜¤. ìž ê¸´ ëª¨ë“ IP 주소 와 범위 목ë¡ì„ ë³´ë ¤ë©´ 대시보드 ë©”ë‰´ì˜ %s íƒìœ¼ë¡œ ì´ë™í•©ë‹ˆë‹¤. ì´ ê¸°ëŠ¥ì„ ì‚¬ìš©í•˜ë ¤ë©´ 다ìŒì„ 수행합니다. ì´ ë‹¬ì„± 가능한 í¬ì¸íŠ¸: %sì— ëŒ€í•œ ê¶Œí•œì„ ë³€ê²½í• ìˆ˜ 없습니다! ë§í¬ ìž ê¸ˆ í•´ì œ: %s ìš”ì² ì•Œë¦¼ ìž ê¸ˆ í•´ì œ í…Œì´ë¸” %s ì—…ë°ì´íŠ¸ 실패: %s를 %së¡œ ë³€ê²½í• ìˆ˜ ì—†ìŒ ë‹¤ìŒ MySQL 보기 ì •ì˜ ì—…ë°ì´íŠ¸ 실패: %s ìœ ìš©í•œ íŒ: ì‚¬ìš©ìž ì‚¬ìš©ìž ê³„ì • ì‚¬ìš©ìž ë¡œê·¸ì¸ íšŒì›ê°€ìž… ê³„ì •ì„ ì°¾ì§€ 못했습니다. ì‚¬ìš©ìž ê³„ì • ì‚¬ìš©ìž ë¡œê·¸ì¸ íšŒì›ê°€ìž… ì‚¬ìš©ìž ë“±ë¡ ì„¤ì • ì´ìš©ìžëª… ì‚¬ìš©ìž ì´ë¦„: 마지막 íŒŒì¼ ë³€ê²½ 보기 마지막으로 ì €ìž¥ëœ íŒŒì¼ ë³€ê²½ ê²°ê³¼ 보기 후ì´ìŠ¤ 조회 WP 보안 WP 보안 í”ŒëŸ¬ê·¸ì¸ WP íŒŒì¼ ì•¡ì„¸ìŠ¤ WP ì‚¬ìš©ìž ì´ë¦„ WP ë²„ì „ ì •ë³´ ì´ í”ŒëŸ¬ê·¸ì¸ ë’¤ì— ê°œë°œìžì— 대 í•œ ìžì„¸í•œ ë‚´ìš©ì€? 우리는 ë‹¹ì‹ ì˜ ì›Œë“œ í”„ë ˆìŠ¤ 사ì´íŠ¸ë¥¼ ë” ì•ˆì „í•˜ê²Œ 만들기 위해 열심히 ë…¸ë ¥í•˜ê³ ìžˆìŠµë‹ˆë‹¤. 우리를 지ì›í•˜ì‹ì‹œì˜¤, ì—¬ê¸°ì— ë°©ë²•ìž…ë‹ˆë‹¤ : 우리는 악성 코드 ì •ë¦¬ì— ëŒ€í•œ ì¡°ì–¸ì„ ì œê³µí•©ë‹ˆë‹¤ 주 악성 코드란 무엇입니까? ì´ ì„œë¹„ìŠ¤ì— ê°€ìž…í•˜ë©´ 다ìŒì„ ì–»ì„ ìˆ˜ 있습니다. 워드 í”„ë ˆìŠ¤ íŒŒì¼ ì•¡ì„¸ìŠ¤ 워드 í”„ë ˆìŠ¤ëŠ” wp-content/debug.logì— ìžˆëŠ” 파ì¼ì— 디버그 ë¡œê¹…ì„ ì¼¤ 수 있는 ì˜µì…˜ì´ ìžˆìŠµë‹ˆë‹¤. ì´ íŒŒì¼ì—는 중요한 ì •ë³´ê°€ í¬í•¨ë 수 있습니다. ìž˜ëª»ëœ ë¡œê·¸ì¸ ì‹œë„ê°€ 너무 많아 ì„œ ìž ê²¨ 있기 ë•Œë¬¸ì— ì—¬ê¸°ì— ìžˆìŠµë‹ˆë‹¤. 활성 .htaccess 파ì¼ì˜ ë°±ì—…ì„ í•˜ëŠ” ê²ƒì´ ì¢‹ìŠµë‹ˆë‹¤. ë°±ì—…ëœ .htaccess 파ì¼ì„ 사용하여 사ì´íŠ¸ì˜ .htaccess ì„¤ì •ì„ ë³µì›í• ìˆ˜ë„ ìžˆìŠµë‹ˆë‹¤. ë°±ì—…ëœ wp-config.php 파ì¼ì„ 사용하여 사ì´íŠ¸ì˜ wp-config.php ì„¤ì •ì„ ë³µì›í• ìˆ˜ë„ ìžˆìŠµë‹ˆë‹¤. ë¡œê·¸ì¸ í™”ì´íŠ¸ë¦¬ìŠ¤íŠ¸ì— í¬í•¨í•˜ë ¤ëŠ” 경우 아래 í…스트 ìƒìžì— ì´ ì£¼ì†Œë¥¼ 복사하여 ë¶™ì—¬ë„£ê¸°í• ìˆ˜ 있습니다. ì¼ë°˜ì 으로 보안 ìœ„í˜‘ì´ ë³€ê²½ë˜ì§€ 않는 검색ì—ì„œ íŒŒì¼ í˜•ì‹ì„ ì œì™¸í• ìˆ˜ 있습니다. 여기ì—는 ì´ë¯¸ì§€ 파ì¼ê³¼ ê°™ì€ ê²ƒë“¤ì´ í¬í•¨ë 수 있습니다. íŠ¹ì • 파ì¼/ë””ë ‰í„°ë¦¬ê°€ ë³€ê²½ëœ ê²½ìš° ì¼ë°˜ì 으로 보안 ìœ„í˜‘ì„ ì œê¸°í•˜ì§€ 않는 검색ì—ì„œ ì œì™¸í• ìˆ˜ 있습니다. 여기ì—는 로그 파ì¼ê³¼ ê°™ì€ ê²ƒë“¤ì´ í¬í•¨ë 수 있습니다. ìžì‹ ì˜ IP 주소를 ê¸ˆì§€í• ìˆ˜ 없습니다. ë¡œê·¸ì¸ íŽ˜ì´ì§€ ìŠ¬ëŸ¬ê·¸ì— ëŒ€í•´ "wp-admin" ê°’ì„ ì‚¬ìš©í• ìˆ˜ 없습니다. "백업 시간 간격" í•„ë“œì— ëŒ€í•œ 비 ìˆ«ìž ê°’ì„ ìž…ë ¥í–ˆìŠµë‹ˆë‹¤. 기본 값으로 ì„¤ì •ë˜ì—ˆìŠµë‹ˆë‹¤. ì´ë©”ì¼ ì£¼ì†Œ %sê°€ 있는 ê³„ì •ì˜ ìž ê¸ˆì„ í•´ì œí•˜ë„ë¡ ìš”ì²í–ˆìŠµë‹ˆë‹¤. ê³„ì • ìž ê¸ˆì„ í•´ì œí•˜ë ¤ë©´ 아래 ë§í¬ë¥¼ í´ë¦í•˜ì‹ì‹œì˜¤. ì¿ í‚¤ 기반 무차별 ë¬´ë ¥ 방지 ê¸°ëŠ¥ì„ ì„±ê³µì 으로 활성화했습니다. ì¿ í‚¤ 기반 무차별 ë¬´ë ¥ 방지 기능 ì„¤ì •ì„ ì„±ê³µì 으로 ì €ìž¥í–ˆìŠµë‹ˆë‹¤. 추가 방화벽 보호 êµ¬ì„±ì„ ì„±ê³µì 으로 ì €ìž¥í–ˆìŠµë‹ˆë‹¤. ë˜í•œ 다ìŒê³¼ ê°™ì€ ëŒ€ì²´ 무차별 ë¬´ë ¥ 방지 ê¸°ëŠ¥ì— ê´€ì‹¬ì´ ìžˆì„ ìˆ˜ 있습니다. ë¡œê·¸ì¸ íŽ˜ì´ì§€ ìŠ¬ëŸ¬ê·¸ì— ì•ŒíŒŒ ìˆ«ìž ë¬¸ìžë¥¼ 사용해야 합니다. 방금 "관리ìž" ì‚¬ìš©ìž ì´ë¦„ì„ ë³€ê²½í–ˆê¸° ë•Œë¬¸ì— ë¡œê·¸ì•„ì›ƒë˜ì—ˆìŠµë‹ˆë‹¤. ".htaccess" 파ì¼ì€ 웹 사ì´íŠ¸ ë³´ì•ˆì˜ í•µì‹¬ 구성 요소ì´ë©° 다양한 ìˆ˜ì¤€ì˜ ë³´í˜¸ ë©”ì»¤ë‹ˆì¦˜ì„ êµ¬í˜„í•˜ë„ë¡ ìˆ˜ì •í• ìˆ˜ 있습니다. "wp-config.php" 파ì¼ì€ 워드 í”„ë ˆìŠ¤ 설치ì—ì„œ 가장 중요한 íŒŒì¼ ì¤‘ 하나입니다. 기본 구성 파ì¼ì´ë©° ë°ì´í„°ë² ì´ìŠ¤ ë° ê¸°íƒ€ 중요한 구성 ìš”ì†Œì˜ ì„¸ë¶€ ì •ë³´ì™€ ê°™ì€ ì¤‘ìš”í•œ í•ëª©ì„ í¬í•¨í•©ë‹ˆë‹¤. .htaccess 파ì¼ì´ 성공ì 으로 ë³µì›ë˜ì—ˆìŠµë‹ˆë‹¤! .htaccess 파ì¼ì´ 성공ì 으로 백업ë˜ì—ˆìŠµë‹ˆë‹¤! FTP í”„ë¡œê·¸ëž¨ì„ ì‚¬ìš©í•˜ì—¬ "/wp-content/aiowps_backups" ë””ë ‰í„°ë¦¬ë¡œ ì´ë™í•˜ì—¬ 파ì¼ì˜ ë³µì‚¬ë³¸ì„ ì»´í“¨í„°ì— ì €ìž¥í•©ë‹ˆë‹¤. WP 설치ì—는 íŒŒì¼ ì‹œìŠ¤í…œì— ëŒ€í•œ 합리ì 으로 ì•ˆì „í•œ íŒŒì¼ ê¶Œí•œ ì„¤ì •ì´ ì´ë¯¸ 함께 ì œê³µë©ë‹ˆë‹¤. 워드 í”„ë ˆìŠ¤ íŒŒì¼ ë° í´ë” 권한 ì„¤ì •ì€ ì•¡ì„¸ìŠ¤ ê°€ëŠ¥ì„±ì„ ì œì–´í•˜ê³ WP 설치를 구성하는 íŒŒì¼ ë° í´ë”ì˜ ê¶Œí•œì„ ì½ê³ 작성합니다. 워드 í”„ë ˆìŠ¤ ë¡œê·¸ì¸ íŽ˜ì´ì§€ URLì˜ ì´ë¦„ì´ ë³€ê²½ë˜ì—ˆìŠµë‹ˆë‹¤. 현재 IP 주소 현재 ë¡œê·¸ì¸ URLì€ ë‹¤ìŒê³¼ ê°™ì€ ê²ƒìž…ë‹ˆë‹¤. ë‹¹ì‹ ì˜ ìƒˆ ì›Œë“œí”„ë ˆìŠ¤ ë¡œê·¸ì¸ URL: 마지막 ë¡œê·¸ì¸ ì´í›„ %d 분 ì´ìƒë˜ì—ˆê¸° ë•Œë¬¸ì— ì„¸ì…˜ì´ ë§Œë£Œë˜ì—ˆìŠµë‹ˆë‹¤. 사ì´íŠ¸ì—는 현재 ë¡œê·¸ì¸ ì´ë¦„ê³¼ 표시 ì´ë¦„ì´ ë™ì¼í•œ ë‹¤ìŒ ê³„ì •ì´ ìžˆìŠµë‹ˆë‹¤. 사ì´íŠ¸ì—기본 "관리ìž" ì‚¬ìš©ìž ì´ë¦„ì„ ì‚¬ìš©í•˜ëŠ” ê³„ì •ì´ ì—†ìŠµë‹ˆë‹¤. wp-config.php 파ì¼ì´ 성공ì 으로 ë³µì›ë˜ì—ˆìŠµë‹ˆë‹¤! DB 백업 8 18 11 15 5 4 14 htaccess ë³µì› ìž‘ì—…ì´ ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤! ë³µì›í•˜ë ¤ëŠ” 파ì¼ì˜ ë‚´ìš©ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. htaccess ë°±ì—…ì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤. htaccess íŒŒì¼ ì´ë¦„ 바꾸기 백업 ì¤‘ì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤. FTP를 사용하여 백업 파ì¼ì— 대한 루트 ë””ë ‰í† ë¦¬ë¥¼ 확ì¸í•˜ì‹ì‹œì˜¤. htaccess íŒŒì¼ ë³µì›ì— 실패했습니다. FTP를 사용하여 수ë™ìœ¼ë¡œ .htaccess를 ë³µì›í•˜ì‹ì‹œì˜¤. 9 19 1 7 17 단순히 현재 사ì´íŠ¸ URL ì£¼ì†Œì— "?%s=1"ì„ ì¶”ê°€í•´ì•¼ 합니다. 6 16 ì¼ë¶€ ë””ë ‰í„°ë¦¬ 10 13 3 12 20 2 wp-config.php ë³µì› ìž‘ì—…ì´ ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤! ë³µì›í•˜ë ¤ëŠ” 파ì¼ì˜ ë‚´ìš©ì„ í™•ì¸í•˜ì‹ì‹œì˜¤. wp-config.php íŒŒì¼ ìž‘ì—… wp-config.php íŒŒì¼ ë³µì›ì— 실패했습니다. FTP를 사용하여 수ë™ìœ¼ë¡œ ì´ íŒŒì¼ì„ ë³µì›í•´ ë³´ì‹ì‹œì˜¤. wp-config.php 파ì¼ì´ 성공ì 으로 ì—…ë°ì´íŠ¸ë˜ì—ˆìŠµë‹ˆë‹¤!